CVE-2014-0728

no score yetEPSS 2.0%

cisco unified communications manager: no CVSS score yet. EPSS 2.0% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05313.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2014-02-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:unified_communications_manager

References

http://osvdb.org/103221
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0728
http://tools.cisco.com/security/center/viewAlert.x?alertId=32834
http://www.securityfocus.com/bid/65499
http://osvdb.org/103221

Check your stack JSON