CVE-2017-6668

2017-06-1306:00:00

cisco

www.cve.org

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc52784 CSCvc97648. Known Affected Releases: 8.1(7)ER1.

CNA Affected

[
  {
    "product": "Cisco Unified Communications Domain Manager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Unified Communications Domain Manager"
      }
    ]
  }
]