Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:call_manager:4.2\(3\)sr2:*:*:*:*:*:*:*

part: h version: 4.2(3)sr2 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductCall Manager (9999a58d-5e0f-5fcc-81e0-546f89cf4af9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4634 vulnerable 2026-06-08 04:49:56.885011 Details available
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.
Published: 2007-08-31T23:00:00.000Z
Updated: 2024-08-07T15:01:09.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4633 vulnerable 2026-06-08 04:49:56.874870 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the (1) user or (2) admin logon page, aka CSCsi10728.
Published: 2007-08-31T23:00:00.000Z
Updated: 2024-08-07T15:01:10.199Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.