VulnerabilityModified
CVE-2013-5517
SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh96567.
MEDIUM 5.5EPSS 1.04%
Does this matter?
Lower severity and a low EPSS score (1.04%). Track it; it rarely justifies an emergency change on its own.
Description
SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh96567.
- CVSS 2.0
- 5.5 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P
- EPSS
- 1.04% probability · 62th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- cisco/unified communications domain manager
- Source
- psirt@cisco.com
References
- http://osvdb.org/98019
- http://secunia.com/advisories/54847Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5517Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31073Vendor Advisory
- http://www.securityfocus.com/bid/62746
- http://osvdb.org/98019
- http://secunia.com/advisories/54847Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5517Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31073Vendor Advisory
- http://www.securityfocus.com/bid/62746
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.