CVE-2015-6299

2015-09-2014:00:00

cisco

www.cve.org

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

41.4%

JSON

SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted POST request, aka Bug ID CSCuv63824.

References

tools.cisco.com/security/center/viewAlert.x?alertId=41074

www.securitytracker.com/id/1033622