CVE-2011-0960

Опубликовано: 20 мая 2011

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html
Exploit
http://tools.cisco.com/security/center/viewAlert.x?alertId=23086
Vendor Advisory
http://www.exploit-db.com/exploits/17304
Exploit
http://www.securityfocus.com/bid/47898
http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf
Exploit
URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/67522
http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html
Exploit
http://tools.cisco.com/security/center/viewAlert.x?alertId=23086
Vendor Advisory
http://www.exploit-db.com/exploits/17304
Exploit
http://www.securityfocus.com/bid/47898
http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf
Exploit
URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/67522

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_operations_manager:*:*:*:*:*:*:*:*

Версия до 8.5 (включая)

cpe:2.3:a:cisco:unified_operations_manager:1.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_operations_manager:2.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_operations_manager:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_operations_manager:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_operations_manager:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_operations_manager:2.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_operations_manager:2.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_operations_manager:2.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_operations_manager:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00297

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-gp85-9v5p-3cfv

github

больше 3 лет назад