CyberSec.Space Logo
Back to CVE Browser

CVE-2007-4634

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.1850%
EPSS Percentile16.34th
PublishedAug 31, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.

Affected Platforms (CPE)

πŸ“¦
Cisco

Unified Communications Manager

= 3.3\(5\)
πŸ“¦
Cisco

Unified Communications Manager

= 3.3\(5\)sr1
πŸ“¦
Cisco

Unified Communications Manager

= 3.3\(5\)sr2a
πŸ“¦
Cisco

Unified Communications Manager

= 4.1\(3\)
πŸ“¦
Cisco

Unified Communications Manager

= 4.1\(3\)sr1
πŸ“¦
Cisco

Unified Communications Manager

= 4.1\(3\)sr2
πŸ“¦
Cisco

Unified Communications Manager

= 4.1\(3\)sr3
πŸ“¦
Cisco

Unified Communications Manager

= 4.1\(3\)sr4
πŸ“¦
Cisco

Unified Communications Manager

= 4.2
πŸ“¦
Cisco

Unified Communications Manager

= 4.2.1
πŸ“¦
Cisco

Unified Communications Manager

= 4.2.2
πŸ“¦
Cisco

Unified Communications Manager

= 4.2.3
πŸ“¦
Cisco

Unified Communications Manager

= 4.2.3sr1
πŸ“¦
Cisco

Unified Communications Manager

= 4.3
πŸ“¦
Cisco

Unified Communications Manager

= 4.3\(1\)
πŸ”Œ
Cisco

Call Manager

= 3.3\(5\)sr1
πŸ”Œ
Cisco

Call Manager

= 3.3\(5\)sr2
πŸ”Œ
Cisco

Call Manager

= 3.3\(5\)sr2a
πŸ”Œ
Cisco

Call Manager

= 4.1
πŸ”Œ
Cisco

Call Manager

= 4.1\(3\)sr1
πŸ”Œ
Cisco

Call Manager

= 4.1\(3\)sr2
πŸ”Œ
Cisco

Call Manager

= 4.1\(3\)sr3
πŸ”Œ
Cisco

Call Manager

= 4.1\(3\)sr4
πŸ”Œ
Cisco

Call Manager

= 4.2
πŸ”Œ
Cisco

Call Manager

= 4.2\(1\)
πŸ”Œ
Cisco

Call Manager

= 4.2\(2\)
πŸ”Œ
Cisco

Call Manager

= 4.2\(3\)
πŸ”Œ
Cisco

Call Manager

= 4.2\(3\)sr1
πŸ”Œ
Cisco

Call Manager

= 4.2\(3\)sr2
πŸ”Œ
Cisco

Call Manager

= 4.3
πŸ”Œ
Cisco

Call Manager

= 4.3\(1\)

References & Advisories

Related Vulnerabilities