{"id":"CVE-2015-0753","aliases":["EUVD-2015-0766","GHSA-q72j-7jh9-2m5f"],"status":"published","title":"SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web...","description":"SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01827,"percentile":0.7896,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2015-05-29T15:00:00Z","modified":"2026-06-17T00:20:50Z","products":[{"vendor":"cisco","product":"unified_web_and_e-mail_interaction_manager"}],"references":[{"url":"http://www.securitytracker.com/id/1032422","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=39013","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0753"},{"url":"https://github.com/advisories/GHSA-q72j-7jh9-2m5f"}],"sources":{"cve":[{"id":"CVE-2015-0753","description":"SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.","status":"published","published":"2015-05-29T15:00:00Z","modified":"2024-08-06T04:17:32.789Z","updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-0766","description":"SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.","status":"published","published":"2015-05-29T15:00:00Z","modified":"2024-08-06T04:17:32Z","updated_at":"2026-11-03T02:22:18.427753Z"}],"ghsa":[{"id":"GHSA-q72j-7jh9-2m5f","title":"SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web...","description":"SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.","status":"published","published":"2022-05-17T03:08:50Z","modified":"2023-01-27T05:06:16Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:42:52.881185Z"}],"nvd":[{"id":"CVE-2015-0753","description":"SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.","status":"published","published":"2015-05-29T15:59:07.373Z","modified":"2026-06-17T00:20:50.903Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:04.906059Z"}]}}