CVE-2011-1610

Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (aka CUCM…

published May 3, 2011

CVSS

—

EPSS

25%

Percentile

97.9

In the wild

Unconfirmed

What it is

Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5)su4, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1)su1 allow remote attackers to execute arbitrary SQL commands via the (1) f, (2) l, or (3) n parameter, aka Bug ID CSCtj42064.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.24822 · 97.9th percentile
Published: 2011-05-03T22:00Z

EPSS history

Timeline

03 MAY 22:00Z
Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (aka CUCM…
cvelistv5