Vulnerability Description
SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum46483.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Communications Manager | <= 10.0\(1\) |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0734Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32916Vendor Advisory
- http://www.securityfocus.com/bid/65645
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0734Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32916Vendor Advisory
- http://www.securityfocus.com/bid/65645
FAQ
What is CVE-2014-0734?
CVE-2014-0734 is a vulnerability with a CVSS score of 7.5 (HIGH). SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to execut...
How severe is CVE-2014-0734?
CVE-2014-0734 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-0734?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Manager.