CVE-2014-2652: Unify Openscape Deployment Service

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in OpenScape Deployment Service (DLS) before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Unify Openscape Deployment Service: before 6.0 (fixed in 6.0); version 7.0 only

Published 2018-03-19. Last modified 2026-06-17.