Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2011-0960

Published: 20/05/2011 Updated: 14/02/2024
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Unified Operations Manager

Vulnerability Summary

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) prior to 8.6 allow remote malicious users to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco unified operations manager 2.2

cisco unified operations manager 2.0

cisco unified operations manager 2.0.1

cisco unified operations manager

cisco unified operations manager 2.0.2

cisco unified operations manager 1.1

cisco unified operations manager 2.3

cisco unified operations manager 2.1

cisco unified operations manager 8.0

cisco unified operations manager 2.0.3

Exploits

Exploit DB: Cisco Unified Operations Manager - Multiple Vulnerabilities
Sense of Security - Security Advisory - SOS-11-006 Release Date 18-May-2011 Last Update - Vendor Notification Date 28-Feb-2011 Product Cisco Unified Operations Manager Common Services Framework Help Servlet Common Service ...
Exploit DB: Cisco Unified Operations Manager XSS / SQL Injection / Directory Traversal
Cisco Unified Operations Manager suffers from cross site scripting, remote SQL injection, and directory traversal vulnerabilities Versions 80 and 85 are affected ...

References

CWE-89http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdfhttp://www.securityfocus.com/bid/47898http://tools.cisco.com/security/center/viewAlert.x?alertId=23086http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.htmlhttp://www.exploit-db.com/exploits/17304https://exchange.xforce.ibmcloud.com/vulnerabilities/67522https://nvd.nist.govhttps://www.exploit-db.com/exploits/17304/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook