Cisco: >> Unity Connection >> 11.0(0.98000.225) Security Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut33659.
CVSS Score
6.8
EPSS Score
0.008
Published
2015-05-07
SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608.
CVSS Score
6.5
EPSS Score
0.014
Published
2015-05-07
Page 3