CVE-2015-4222: SQL Injection

Published Jun 26, 2015

Updated

SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325.

Affected Software

1 affected component

Cisco Unified Communications Manager IM and Presence Service=9.1\(1\)

Event History

Jun 26, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4222?

CVE-2015-4222 is considered a medium severity vulnerability due to its potential for exploitation via SQL injection.

How do I fix CVE-2015-4222?

To fix CVE-2015-4222, users should apply the security updates provided by Cisco for Cisco Unified Communications Manager IM and Presence Service version 9.1(1).

Who is affected by CVE-2015-4222?

CVE-2015-4222 affects remote authenticated users of Cisco Unified Communications Manager IM and Presence Service version 9.1(1).

What can attackers do with CVE-2015-4222?

Attackers can execute arbitrary SQL commands on the affected system due to the SQL injection vulnerability in CVE-2015-4222.

Is there a workaround for CVE-2015-4222?

Currently, there are no known effective workarounds for mitigating CVE-2015-4222 other than applying the security updates.