CVE-2014-0734

ALTO 7.5CVE-2014-0734 · Published 20/02/2014 · updated 17/06/2026

En resumen

CVE-2014-0734 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a unified communications manager (cisco).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 67.4% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
unified communications manager cisco	`= 10.0= 3.3(5)= 3.3(5)sr1= 3.3(5)sr2a= 4.1(3)= 4.1(3)sr1= 4.1(3)sr2= 4.1(3)sr3= 4.1(3)sr4= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.3sr1= 4.2.3sr2= 4.2.3sr2b= 4.3≤ 10.0\(1\)`	No fix yet

Description

SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum46483.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0734 · Vendor Advisory
tools.cisco.com/security/center/viewAlert.x · Vendor Advisory
securityfocus.com/bid/65645

Más vulnerabilidades de unified communications manager

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified communications manager

cisco

= 10.0= 3.3(5)= 3.3(5)sr1= 3.3(5)sr2a= 4.1(3)= 4.1(3)sr1= 4.1(3)sr2= 4.1(3)sr3= 4.1(3)sr4= 4.2= 4.2.1= 4.2.2= 4.2.3= 4.2.3sr1= 4.2.3sr2= 4.2.3sr2b= 4.3≤ 10.0\(1\)

No fix yet

Más vulnerabilidades de unified communications manager

Ver todo →