CVE-2014-3339: Cisco Unified Communications Domain Manager

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users to execute arbitrary SQL commands via crafted input to unspecified pages, aka Bug ID CSCup74290.

Affected products

• Cisco Unified Communications Domain Manager: affected versions not specified
• Cisco Unified Presence Server: any version

Published 2014-08-12. Last modified 2026-06-17.