CVE-2014-3287

No fix known EPSS 2%

SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted filename parameters in a URL, aka Bug ID CSCuo17337.

Published 2014-06-10 · CVE record · OSV

Products: cisco unified_communications_manager