CVE-2011-4487

SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6…

published March 1, 2012

CVSS
—
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allows remote attackers to execute arbitrary SQL commands via a crafted SCCP registration, aka Bug ID CSCtu73538.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00950 · 60.6th percentile
Published
2012-03-01T01:00Z
EPSS history
Timeline
  • 01 MAR 01:00Z
    SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6…
    cvelistv5