cveboard RSS feed

CVE-2023-20211

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by authenticating to the application as a user with read-only or higher privileges and sending crafted HTTP requests to an affected system. A successful exploit could allow the attacker to read or modify data in the underlying database or elevate their privileges.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco Unified Communications Manager

Vendor
Cisco
Product
Cisco Unified Communications Manager
Platforms
Unknown
Default status
Unknown
Cisco Unified Communications Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
12.0(1)SU1affectedUnavailableUnavailableUnavailableNone listed
12.0(1)SU2affectedUnavailableUnavailableUnavailableNone listed
12.0(1)SU3affectedUnavailableUnavailableUnavailableNone listed
12.0(1)SU4affectedUnavailableUnavailableUnavailableNone listed
12.0(1)SU5affectedUnavailableUnavailableUnavailableNone listed
12.5(1)affectedUnavailableUnavailableUnavailableNone listed
12.5(1)SU1affectedUnavailableUnavailableUnavailableNone listed
12.5(1)SU2affectedUnavailableUnavailableUnavailableNone listed
12.5(1)SU3affectedUnavailableUnavailableUnavailableNone listed
12.5(1)SU4affectedUnavailableUnavailableUnavailableNone listed
12.5(1)SU5affectedUnavailableUnavailableUnavailableNone listed
12.5(1)SU6affectedUnavailableUnavailableUnavailableNone listed
12.5(1)SU7affectedUnavailableUnavailableUnavailableNone listed
12.5(1)SU7aaffectedUnavailableUnavailableUnavailableNone listed
14affectedUnavailableUnavailableUnavailableNone listed
14SU1affectedUnavailableUnavailableUnavailableNone listed
14SU2affectedUnavailableUnavailableUnavailableNone listed
14SU3affectedUnavailableUnavailableUnavailableNone listed

Cisco Unified Communications Manager / Cisco Unity Connection

Vendor
Cisco
Product
Cisco Unified Communications Manager / Cisco Unity Connection
Platforms
Unknown
Default status
Unknown
Cisco Unified Communications Manager / Cisco Unity Connection · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
10.5(2)SU10affectedUnavailableUnavailableUnavailableNone listed
10.5(1)affectedUnavailableUnavailableUnavailableNone listed
10.5(1)SU1affectedUnavailableUnavailableUnavailableNone listed
10.5(1)SU1aaffectedUnavailableUnavailableUnavailableNone listed
10.5(2)affectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU1affectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU2affectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU3affectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU4affectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU5affectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU6affectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU7affectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU8affectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU9affectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU2aaffectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU3aaffectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU4aaffectedUnavailableUnavailableUnavailableNone listed
10.5(2)SU6aaffectedUnavailableUnavailableUnavailableNone listed
11.0(1)affectedUnavailableUnavailableUnavailableNone listed
11.0(1a)affectedUnavailableUnavailableUnavailableNone listed
11.0(1a)SU1affectedUnavailableUnavailableUnavailableNone listed
11.0(1a)SU2affectedUnavailableUnavailableUnavailableNone listed
11.0(1a)SU3affectedUnavailableUnavailableUnavailableNone listed
11.0(1a)SU3aaffectedUnavailableUnavailableUnavailableNone listed
11.0(1a)SU4affectedUnavailableUnavailableUnavailableNone listed
11.0.1affectedUnavailableUnavailableUnavailableNone listed
11.0.2affectedUnavailableUnavailableUnavailableNone listed
11.0.5affectedUnavailableUnavailableUnavailableNone listed
11.5(1)affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU1affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU2affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU3affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU3aaffectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU3baffectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU4affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU5affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU6affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU7affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU8affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU9affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU10affectedUnavailableUnavailableUnavailableNone listed
11.5(1)SU11affectedUnavailableUnavailableUnavailableNone listed
10.0(1)SU2affectedUnavailableUnavailableUnavailableNone listed
10.0(1)affectedUnavailableUnavailableUnavailableNone listed
10.0(1)SU1affectedUnavailableUnavailableUnavailableNone listed