dbcve.org
Vulnerability index

Browse CVEs

111 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness SQL InjectionCWE-89 × clear
Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Unified Communications Manager HIGH 7.5
CVE-2014-0728

SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers …

Fix: after 10.0
Fix from $1,950 2014-02-13
Unified Communications Manager HIGH 7.5
CVE-2014-0729

SQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco Unified Communications Manager (UCM) allows remote atta…

Mitigation only
Fix from $1,950 2014-02-13
Unified Presence Server MEDIUM 6.5
CVE-2013-6983

SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL commands…

Mitigation only
Fix from $1,600 2013-12-31
Identity Services Engine Software MEDIUM 6.5
CVE-2013-5525

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute…

Fix: after 1.2
Fix from $1,600 2013-10-10
Unified Communications Domain Manager MEDIUM 5.5
CVE-2013-5517

SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrar…

Mitigation only
Fix from $1,600 2013-10-02
Unified Operations Manager MEDIUM 6.5
CVE-2013-3437

SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary …

Mitigation only
Fix from $1,600 2013-07-23
Unified Communications Manager HIGH 7.5
CVE-2013-3404

SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows remote attackers to execute arbitrary SQL co…

Mitigation only
Fix from $1,950 2013-07-18
Unified Communications Manager MEDIUM 6.5
CVE-2013-3412

SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitra…

Mitigation only
Fix from $1,600 2013-07-18
Network Admission Control Manager And Server System Software HIGH 7.5
CVE-2013-1177

SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute…

Fix: after 4.8.3
Fix from $1,950 2013-04-18
Connected Grid Network Management System HIGH 7.5
CVE-2013-1163

Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remot…

Mitigation only
Fix from $1,950 2013-04-01
Unified Meetingplace MEDIUM 6.5
CVE-2012-0337

SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL command…

Mitigation only
Fix from $1,600 2012-05-02
Unified Communications Manager MEDIUM 6.8
CVE-2011-4487

SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.…

Mitigation only
Fix from $1,600 2012-03-01
Sa500 Software MEDIUM 5.0
CVE-2011-2546

SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remot…

Fix: after 2.1.18
Fix from $1,600 2011-07-28
Unified Operations Manager HIGH 7.5
CVE-2011-0960

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands…

Fix: after 8.5
Fix from $1,950 2011-05-20
Unified Communications Manager HIGH 8.5
CVE-2011-1609EPSS 20%

SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 …

Mitigation only
Fix from $1,950 2011-05-03
Unified Communications Manager MEDIUM 6.4
CVE-2011-1610EPSS 25%

Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (…

Mitigation only
Fix from $1,600 2011-05-03
Wireless Control System Software HIGH 9.0
CVE-2010-2826

SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x before 6.0.196.0 allows remote authenticated users to execute arbitrary SQL …

Fix: after 6.0.188.0
Fix from $1,950 2010-08-17
Security Agent MEDIUM 6.5
CVE-2010-0147

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 a…

Patch available
Fix from $1,600 2010-02-23
Unified Meetingplace HIGH 9.0
CVE-2010-0139

Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remo…

Patch available
Fix from $1,950 2010-01-28
Unified Callmanager MEDIUM 6.5
CVE-2008-0026

SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remot…

Mitigation only
Fix from $1,600 2008-02-14
Unified Communications Manager HIGH 9.3
CVE-2007-4634

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 be…

No fix yet
Fix from $1,950 2007-08-31