Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:call_manager:3.3\(5\)sr2a:*:*:*:*:*:*:*

part: h version: 3.3(5)sr2a update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductCall Manager (9999a58d-5e0f-5fcc-81e0-546f89cf4af9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4634 vulnerable 2026-06-08 04:49:56.884818 Details available
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.
Published: 2007-08-31T23:00:00.000Z
Updated: 2024-08-07T15:01:09.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4633 vulnerable 2026-06-08 04:49:56.869587 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the (1) user or (2) admin logon page, aka CSCsi10728.
Published: 2007-08-31T23:00:00.000Z
Updated: 2024-08-07T15:01:10.199Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.