{"id":"CVE-2015-0699","aliases":["EUVD-2015-0712","GHSA-f6m8-h84x-xg8h"],"status":"published","title":"SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified...","description":"SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01879,"percentile":0.79587,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2015-04-15T10:00:00Z","modified":"2026-06-17T00:20:45Z","products":[{"vendor":"cisco","product":"unified_communications_domain_manager"}],"references":[{"url":"http://www.securitytracker.com/id/1032134","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=38366","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0699"},{"url":"https://github.com/advisories/GHSA-f6m8-h84x-xg8h"}],"sources":{"cve":[{"id":"CVE-2015-0699","description":"SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563.","status":"published","published":"2015-04-15T10:00:00Z","modified":"2024-08-06T04:17:32.621Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0712","description":"SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563.","status":"published","published":"2015-04-15T10:00:00Z","modified":"2024-08-06T04:17:32Z","updated_at":"2026-11-03T02:22:18.427753Z"}],"ghsa":[{"id":"GHSA-f6m8-h84x-xg8h","title":"SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified...","description":"SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563.","status":"published","published":"2022-05-17T03:07:47Z","modified":"2023-01-27T05:07:25Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:43:06.90939Z"}],"nvd":[{"id":"CVE-2015-0699","description":"SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563.","status":"published","published":"2015-04-15T10:59:05.44Z","modified":"2026-06-17T00:20:45.683Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:03:04.095849Z"}]}}