Cisco Unified CM SQL Injection Flaw Let Attackers Execute Crafted SQL Queries

Cisco released fixes for Unified Communications Manager (CM) and Unified Communications Manager Session Management Edition to address high-severity SQL injection vulnerability. “An attacker could exploit this vulnerability by authenticating to the application as a low-privileged user and sending crafted SQL queries to an affected system”, Cisco reports. “A successful exploit could allow the attacker to […]

The post <strong>Cisco Unified CM SQL Injection Flaw Let Attackers Execute Crafted SQL Queries</strong> appeared first on GBHackers - Latest Cyber Security News | …

address application attackers cisco communications exploit fixes flaw high injection low management manager privileged privileged user reports session severity sql sql injection system unified communications unified communications manager vulnerability