PT-2013-4369

CVE-2013-3412

Published

2013-07-18

Updated

2013-08-20

CVSS 2.0

6.5

Medium

MetricsAV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 7.1(x) through 9.1(2)

Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands.

Recommendations For versions 7.1(x) through 9.1(2), update to a version that contains a fix for this issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾