CVEvulnerability
CVE-2015-4222
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325.
Affected configurations
• cisco unified communications manager im and presence service 9.1\(1\)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39506 Vendor Advisory
- http://www.securityfocus.com/bid/75400 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032716 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39506 Vendor Advisory
- http://www.securityfocus.com/bid/75400 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032716 Third Party Advisory, VDB Entry