CVE-2011-0960: Cisco Unified Operations Manager

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716.

Affected products

• Cisco Unified Operations Manager: up to and including 8.5; version 1.1 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; …

Published 2011-05-20. Last modified 2026-06-16.