CVE-2014-0728: Cisco Unified Communications Manager

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05313.

Affected products

• Cisco Unified Communications Manager: up to and including 10.0\(1\); version 10.0 only

Published 2014-02-13. Last modified 2026-06-17.