CVE-2007-4634

no score yetEPSS 4.3%

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.

EPSS: 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2007-08-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:call_manager
cisco:unified_communications_manager

References

http://secunia.com/advisories/26641
http://securitytracker.com/id?1018624
http://www.cisco.com/en/US/products/products_security_advisory09186a00808ae327.shtml
http://www.securityfocus.com/bid/25480
http://www.vupen.com/english/advisories/2007/3010

Check your stack JSON