Browse CVEs

HIGH 7.5 CVE-2014-0728 SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers … Unified Communications Manager after 10.0 Fix from $1,9502014-02-13 HIGH 7.5 CVE-2014-0729 SQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco Unified Communications Manager (UCM) allows remote atta… Unified Communications Manager Mitigation only Fix from $1,9502014-02-13 MEDIUM 6.5 CVE-2013-6983 SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL commands… Unified Presence Server Mitigation only Fix from $1,6002013-12-31 MEDIUM 6.5 CVE-2013-5525 SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute… Identity Services Engine Software after 1.2 Fix from $1,6002013-10-10 MEDIUM 5.5 CVE-2013-5517 SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrar… Unified Communications Domain Manager Mitigation only Fix from $1,6002013-10-02 MEDIUM 6.5 CVE-2013-3437 SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary … Unified Operations Manager Mitigation only Fix from $1,6002013-07-23 HIGH 7.5 CVE-2013-3404 SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows remote attackers to execute arbitrary SQL co… Unified Communications Manager Mitigation only Fix from $1,9502013-07-18 MEDIUM 6.5 CVE-2013-3412 SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitra… Unified Communications Manager Mitigation only Fix from $1,6002013-07-18 HIGH 7.5 CVE-2013-1177 SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute… Network Admission Control Manager And Server System Software after 4.8.3 Fix from $1,9502013-04-18 HIGH 7.5 CVE-2013-1163 Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remot… Connected Grid Network Management System Mitigation only Fix from $1,9502013-04-01 MEDIUM 6.5 CVE-2012-0337 SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL command… Unified Meetingplace Mitigation only Fix from $1,6002012-05-02 MEDIUM 6.8 CVE-2011-4487 SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.… Unified Communications Manager Mitigation only Fix from $1,6002012-03-01 MEDIUM 5.0 CVE-2011-2546 SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remot… Sa500 Software after 2.1.18 Fix from $1,6002011-07-28 HIGH 7.5 CVE-2011-0960 Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands… Unified Operations Manager after 8.5 Fix from $1,9502011-05-20 HIGH 8.5 CVE-2011-1609EPSS 20% SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 … Unified Communications Manager Mitigation only Fix from $1,9502011-05-03 MEDIUM 6.4 CVE-2011-1610EPSS 25% Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (… Unified Communications Manager Mitigation only Fix from $1,6002011-05-03 HIGH 9.0 CVE-2010-2826 SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x before 6.0.196.0 allows remote authenticated users to execute arbitrary SQL … Wireless Control System Software after 6.0.188.0 Fix from $1,9502010-08-17 MEDIUM 6.5 CVE-2010-0147 SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 a… Security Agent Patch available Fix from $1,6002010-02-23 HIGH 9.0 CVE-2010-0139 Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remo… Unified Meetingplace Patch available Fix from $1,9502010-01-28 MEDIUM 6.5 CVE-2008-0026 SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remot… Unified Callmanager Mitigation only Fix from $1,6002008-02-14 HIGH 9.3 CVE-2007-4634 Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 be… Unified Communications Manager No fix yet Fix from $1,9502007-08-31