Security Advisory

CVE-2017-3886

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-07 17:00:00

Last updated 2024-08-05 14:39:41

Assigner cisco

CVSS score not scored

State PUBLISHED

Description

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user to execute SQL database queries. More Information: CSCvc74291. Known Affected Releases: 1.0(1.10000.10) 11.5(1.10000.6). Known Fixed Releases: 12.0(0.98000.619) 12.0(0.98000.485) 12.0(0.98000.212) 11.5(1.13035.1) 11.0(1.23900.5) 11.0(1.23900.2) 11.0(1.23067.1) 10.5(2.15900.2).

← Browse all CVEs View on cve.org ↗