CVE-2014-3339: SQL Injection
Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users to execute arbitrary SQL commands via crafted input to unspecified pages, aka Bug ID CSCup74290.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3339?
CVE-2014-3339 is classified as a high-severity vulnerability due to its potential to allow remote authenticated users to execute arbitrary SQL commands.
How do I fix CVE-2014-3339?
To fix CVE-2014-3339, apply the relevant security patches provided by Cisco for Unified Communications Manager and Unified Presence Server.
Who is affected by CVE-2014-3339?
CVE-2014-3339 affects users of Cisco Unified Communications Manager and Cisco Unified Presence Server, specifically those with administrative access.
What types of attacks can CVE-2014-3339 facilitate?
CVE-2014-3339 can facilitate SQL injection attacks, allowing attackers to manipulate database queries and potentially gain unauthorized access to sensitive data.
What are the implications of CVE-2014-3339 for organizations?
Organizations affected by CVE-2014-3339 may face severe security risks, including data breaches and compromise of their communication systems if the vulnerability is exploited.