PT-2014-5228
CVE-2014-3336
·
تاريخ النشر
2014-08-11
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Cisco Unity Connection versions 9.1(2) and earlier
Description
A SQL injection issue in the web framework allows remote authenticated users to execute arbitrary SQL commands via a crafted request.
Recommendations
For Cisco Unity Connection versions 9.1(2) and earlier, update to a version later than 9.1(2) to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾