CVE-2014-3339 | BDVDB-2026-63113 Detail

Description#

Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users to execute arbitrary SQL commands via crafted input to unspecified pages, aka Bug ID CSCup74290.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3339
http://www.securityfocus.com/bid/69200
https://exchange.xforce.ibmcloud.com/vulnerabilities/95250

Exploit#

No public exploit known

History#

Version 12014-08-12Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.