CVE-2014-3287
N/A
N/A
Summary
SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted filename parameters in a URL, aka Bug ID CSCuo17337.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3287
- http://www.securityfocus.com/bid/68000
- http://www.securitytracker.com/id/1030411
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3287
- http://www.securityfocus.com/bid/68000
- http://www.securitytracker.com/id/1030411
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.