Cisco Unified Communications Manager SQL Injection (CVE-2011-1610)

Related Vulnerabilities: CVE-2011-1610  

Check Point Reference: CPAI-2011-0743 Date Published: 6 Mar 2024 Severity: Medium Last Updated: Wednesday 06 March, 2024 Source: Industry Reference:CVE-2011-1610
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? Cisco Unified Communications Manager 6.0
Cisco Unified Communications Manager 6.1(1)
Cisco Unified Communications Manager 6.1(1a)
Cisco Unified Communications Manager 6.1(1b)
Cisco Unified Communications Manager 6.1(2)
Cisco Unified Communications Manager 6.1(2)su1
Cisco Unified Communications Manager 6.1(2)su1a
Cisco Unified Communications Manager 6.1(3)
Cisco Unified Communications Manager 6.1(3a)
Cisco Unified Communications Manager 6.1(3b)
Cisco Unified Communications Manager 6.1(3b)su1
Cisco Unified Communications Manager 6.1(4)
Cisco Unified Communications Manager 6.1(4)su1
Cisco Unified Communications Manager 6.1(4a)
Cisco Unified Communications Manager 6.1(4a)su2
Cisco Unified Communications Manager 6.1(5)
Cisco Unified Communications Manager 6.1(5)su1
Cisco Unified Communications Manager 6.1(5)su2 Vulnerability Description An SQL injection vulnerability exists in Cisco Unified Communications Manager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.