Page 39 of 294 results (0.010 seconds)

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2014-0728

https://notcve.org/view.php?id=CVE-2014-0728

SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05313. Vulnerabilidad de inyección SQL en la interfaz Java Database en Cisco Unified Communications Manager (UCM) 10.0(1) y anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de una URL manipulada, también conocido como Bug ID CSCum05313. • http://osvdb.org/103221 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0728 http://tools.cisco.com/security/center/viewAlert.x?alertId=32834 http://www.securityfocus.com/bid/65499 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2014-0729

https://notcve.org/view.php?id=CVE-2014-0729

SQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05302. Vulnerabilidad de inyección SQL en la interfaz Enterprise Mobility Application (EMApp) en Cisco Unified Communications Manager (UCM) permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de una URL manipulada, también conocido como Bug ID CSCum05302. • http://osvdb.org/103220 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0729 http://www.securityfocus.com/bid/65501 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2014-0723

https://notcve.org/view.php?id=CVE-2014-0723

Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum05343. Vulnerabilidad de XSS en la interfaz IP Manager Assistant (IPMA) en Cisco Unified Communications Manager (UCM) permite a atacantes remotos inyectar script Web o HTML arbitrarios a través de una URL manipulada, también conocido como Bug ID CSCum05343. • http://osvdb.org/103222 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0723 http://www.securityfocus.com/bid/65495 http://www.securitytracker.com/id/1029756 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2014-0722

https://notcve.org/view.php?id=CVE-2014-0722

The log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly validate authentication, which allows remote attackers to cause a denial of service (performance degradation) via unspecified use of this application, aka Bug ID CSCum05347. La aplicación web log4jinit en Cisco Unified Communications Manager (UCM) no valida adecuadamente la autenticación, lo que permite a atacantes remotos causar una denegación de servicio (degradación de rendimiento) a través del uso no especificado de esta aplicación, también conocido como Bug ID CSCum05347. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0722 • CWE-287: Improper Authentication •

CVSS: 4.0EPSS: 0%CPEs: 2EXPL: 0

CVE-2014-0724

https://notcve.org/view.php?id=CVE-2014-0724

The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340. La interfaz Bulk Administration en Cisco Unified Communications Manager (UCM) 10.0(1) y anteriores permite a atacantes remotos evadir la autenticación y leer archivos arbitrarios mediante el uso de una petición no especificada, también conocido como Bug ID CSCum05340. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0724 http://tools.cisco.com/security/center/viewAlert.x?alertId=32825 • CWE-20: Improper Input Validation •