CVE-2014-3339

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-12 · updated 2026-06-17
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users to execute arbitrary SQL commands via crafted input to unspecified pages, aka Bug ID CSCup74290.

Affected products

Cisco Unified Communications Domain Manager: all versions
Cisco Unified Presence Server: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3339
http://www.securityfocus.com/bid/69200
https://exchange.xforce.ibmcloud.com/vulnerabilities/95250
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3339
http://www.securityfocus.com/bid/69200
https://exchange.xforce.ibmcloud.com/vulnerabilities/95250

Get alerted when CVE-2014-3339 or the next vulnerability affects your stack