CVE-2015-6433: Cisco Unified Communications Manager

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767.

Affected products

• Cisco Unified Communications Manager: version 11.0(0.98000.225) only

Published 2016-01-08. Last modified 2026-06-17.