CVE-2014-0734
20.02.2014, 05:18
SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum46483.
| Vendor | Product | Version |
|---|---|---|
| cisco | unified_communications_manager | 𝑥 ≤ 10.0\(1\) |
| cisco | unified_communications_manager | 3.3\(5\) |
| cisco | unified_communications_manager | 3.3\(5\)sr1 |
| cisco | unified_communications_manager | 3.3\(5\)sr2a |
| cisco | unified_communications_manager | 4.1\(3\) |
| cisco | unified_communications_manager | 4.1\(3\)sr1 |
| cisco | unified_communications_manager | 4.1\(3\)sr2 |
| cisco | unified_communications_manager | 4.1\(3\)sr3 |
| cisco | unified_communications_manager | 4.1\(3\)sr4 |
| cisco | unified_communications_manager | 4.2 |
| cisco | unified_communications_manager | 4.2.1 |
| cisco | unified_communications_manager | 4.2.2 |
| cisco | unified_communications_manager | 4.2.3 |
| cisco | unified_communications_manager | 4.2.3sr1:sr1 |
| cisco | unified_communications_manager | 4.2.3sr2:sr2 |
| cisco | unified_communications_manager | 4.2.3sr2b:sr2b |
| cisco | unified_communications_manager | 4.3 |
| cisco | unified_communications_manager | 10.0 |
𝑥
= Vulnerable software versions
References