CVE-2015-4233
published 2015-07-02CVE-2015-4233: SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors…
PriorityP339medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
1.99%
78.4th percentile
SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | unified_meetingplace | — | — |
CVSS provenance
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_cisco6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Unified MeetingPlace SQL Injection Vulnerability
vendor_cisco·2015-06-30·CVSS 6.5
CVE-2015-4233 [MEDIUM] CWE-89 Cisco Unified MeetingPlace SQL Injection Vulnerability
Cisco Unified MeetingPlace SQL Injection Vulnerability
A vulnerability in Cisco Unified MeetingPlace could allow an authenticated, remote attacker to impact the confidentiality, integrity, and availability of the affected system by executing arbitrary SQL queries.
The vulnerability is due to failure to validate user-supplied input used in SQL queries. An attacker could exploit this vulnerability by sending a crafted SQL statement to an affected system. Successful exploitation could allow the attacker to read, modify, or delete entries in some database tables.
Cisco has confirmed the vulnerability and released software updates.
To exploit this vulnerability, an attacker must authenticate to the targeted system. This access requirement reduces the likelihood of a successful exploit.
Ci
GHSA
GHSA-2fg8-h8hj-9h3c: SQL injection vulnerability in Cisco Unified MeetingPlace 8
ghsa_unreviewed·2022-05-17
CVE-2015-4233 [MEDIUM] CWE-89 GHSA-2fg8-h8hj-9h3c: SQL injection vulnerability in Cisco Unified MeetingPlace 8
SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-07-02
Published