VAR-201505-0195
Vulnerability from variot - Updated: 2024-02-13 22:46SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028. Vendors have confirmed this vulnerability Bug ID CSCuu30028 It is released as.By any third party SQL The command may be executed. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. This issue being tracked by Cisco Bug ID CSCuu30028. Cisco Unified E-mail Interaction Manager is a product used to manage a large number of customer emails submitted to corporate mailboxes or websites; Unified Web Interaction Manager can help call center business representatives use websites and text chat or real-time Web collaboration to answer customer questions product. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201505-0195",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "unified web and e-mail interaction manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "9.0\\(2\\)"
},
{
"model": "unified web and e-mail interaction manager",
"scope": "eq",
"trust": 1.1,
"vendor": "cisco",
"version": "9.0(2)"
}
],
"sources": [
{
"db": "BID",
"id": "74849"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002855"
},
{
"db": "CNNVD",
"id": "CNNVD-201505-588"
},
{
"db": "NVD",
"id": "CVE-2015-0753"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:unified_web_and_e-mail_interaction_manager:9.0\\(2\\):*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2015-0753"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco",
"sources": [
{
"db": "BID",
"id": "74849"
}
],
"trust": 0.3
},
"cve": "CVE-2015-0753",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 6.8,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2015-0753",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-78699",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2015-0753",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201505-588",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-78699",
"trust": 0.1,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2015-0753",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-78699"
},
{
"db": "VULMON",
"id": "CVE-2015-0753"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002855"
},
{
"db": "CNNVD",
"id": "CNNVD-201505-588"
},
{
"db": "NVD",
"id": "CVE-2015-0753"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028. Vendors have confirmed this vulnerability Bug ID CSCuu30028 It is released as.By any third party SQL The command may be executed. \nExploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. \nThis issue being tracked by Cisco Bug ID CSCuu30028. Cisco Unified E-mail Interaction Manager is a product used to manage a large number of customer emails submitted to corporate mailboxes or websites; Unified Web Interaction Manager can help call center business representatives use websites and text chat or real-time Web collaboration to answer customer questions product. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-0753"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002855"
},
{
"db": "BID",
"id": "74849"
},
{
"db": "VULHUB",
"id": "VHN-78699"
},
{
"db": "VULMON",
"id": "CVE-2015-0753"
}
],
"trust": 2.07
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2015-0753",
"trust": 2.9
},
{
"db": "SECTRACK",
"id": "1032422",
"trust": 1.2
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002855",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201505-588",
"trust": 0.7
},
{
"db": "BID",
"id": "74849",
"trust": 0.4
},
{
"db": "VULHUB",
"id": "VHN-78699",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2015-0753",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-78699"
},
{
"db": "VULMON",
"id": "CVE-2015-0753"
},
{
"db": "BID",
"id": "74849"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002855"
},
{
"db": "CNNVD",
"id": "CNNVD-201505-588"
},
{
"db": "NVD",
"id": "CVE-2015-0753"
}
]
},
"id": "VAR-201505-0195",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-78699"
}
],
"trust": 0.01
},
"last_update_date": "2024-02-13T22:46:35.641000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "39013",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=39013"
},
{
"title": "Cisco: Cisco Unified Email Interaction Manager and Cisco Unified Web Interaction Manager SQL Injection Vulnerability",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts\u0026qid=cisco-sa-20150527-cve-2015-0753"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2015-0753"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002855"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-20",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-78699"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002855"
},
{
"db": "NVD",
"id": "CVE-2015-0753"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.1,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=39013"
},
{
"trust": 1.2,
"url": "http://www.securitytracker.com/id/1032422"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-0753"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-0753"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/c/en/us/products/customer-collaboration/unified-email-interaction-manager/index.html"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/c/en/us/products/customer-collaboration/unified-web-interaction-manager/index.html"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/20.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20150527-cve-2015-0753"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-78699"
},
{
"db": "VULMON",
"id": "CVE-2015-0753"
},
{
"db": "BID",
"id": "74849"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002855"
},
{
"db": "CNNVD",
"id": "CNNVD-201505-588"
},
{
"db": "NVD",
"id": "CVE-2015-0753"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-78699"
},
{
"db": "VULMON",
"id": "CVE-2015-0753"
},
{
"db": "BID",
"id": "74849"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002855"
},
{
"db": "CNNVD",
"id": "CNNVD-201505-588"
},
{
"db": "NVD",
"id": "CVE-2015-0753"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-05-29T00:00:00",
"db": "VULHUB",
"id": "VHN-78699"
},
{
"date": "2015-05-29T00:00:00",
"db": "VULMON",
"id": "CVE-2015-0753"
},
{
"date": "2015-05-27T00:00:00",
"db": "BID",
"id": "74849"
},
{
"date": "2015-06-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-002855"
},
{
"date": "2015-05-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201505-588"
},
{
"date": "2015-05-29T15:59:07.373000",
"db": "NVD",
"id": "CVE-2015-0753"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-01-04T00:00:00",
"db": "VULHUB",
"id": "VHN-78699"
},
{
"date": "2017-01-04T00:00:00",
"db": "VULMON",
"id": "CVE-2015-0753"
},
{
"date": "2015-05-27T00:00:00",
"db": "BID",
"id": "74849"
},
{
"date": "2015-06-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-002855"
},
{
"date": "2015-06-01T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201505-588"
},
{
"date": "2017-01-04T15:34:44.883000",
"db": "NVD",
"id": "CVE-2015-0753"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201505-588"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Unified Email Interaction Manager and Cisco Unified Web Interaction Manager In SQL Injection vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-002855"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201505-588"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…