CVE-2017-6668

Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc52784 CSCvc97648. Known Affected Releases: 8.1(7)ER1.

Score

CVSS 3.0 4.9 Medium

Status

Modified - psirt@cisco.com

Published

2017-06-13

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Unified Communications Domain Manager (Cisco)

References

• http://www.securityfocus.com/bid/98947
• http://www.securitytracker.com/id/1038632
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-cucm2