cisco-sa-cucm-injection-g6MbwH2: Cisco Unified Communications Manager SQL Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-cucm-injection-g6MbwH2?
The severity of cisco-sa-cucm-injection-g6MbwH2 is classified as high due to the potential for SQL injection attacks.
How do I fix cisco-sa-cucm-injection-g6MbwH2?
To fix cisco-sa-cucm-injection-g6MbwH2, apply the latest software updates provided by Cisco for Unified Communications Manager and Unified Communications Manager Session Management Edition.
What systems are affected by cisco-sa-cucm-injection-g6MbwH2?
cisco-sa-cucm-injection-g6MbwH2 affects Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition.
Who can exploit cisco-sa-cucm-injection-g6MbwH2?
An authenticated remote attacker with access to the web-based management interface can exploit cisco-sa-cucm-injection-g6MbwH2.
What kind of attacks can be performed using cisco-sa-cucm-injection-g6MbwH2?
cisco-sa-cucm-injection-g6MbwH2 allows for SQL injection attacks, which can be used to manipulate database queries.