« Volver al listado

CVE-2010-0139

Estado: ModificadaAlta (9)—

Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Unified Meetingplace

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0139",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 8.5,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-01-28T20:30:01.417",
  "references": [
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/37965",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/37965",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691."
    },
    {
      "lang": "es",
      "value": "Cisco Unified MeetingPlace v7 anterior a v7.0(2.3) versión 5F, v6 anterior a v6.0.639.2, y posiblemente v5 no valida adecuadamente los comandos SQL, lo que permite a atacantes remotos crear, modificar y borrar datos de la base de datos a través de vectores sin especificar, también conocido como Bug ID CSCtc39691."
    }
  ],
  "lastModified": "2026-06-16T23:15:33.213",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF24766A-D95A-4D07-82AC-04C13C61493D"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6B93B69-FFE0-4708-BD91-5FE16B6B8ACF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52D721B4-C0B8-4B7C-8C18-6B6B699B48E0"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:6.0.170.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48EABD4D-F43B-47D4-940E-FAF72B333F25"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:6.0.244:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F418C20-3F23-4A70-B159-FDB682FEA297"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F1B3B645-4500-4B63-8D1A-1139537DA522"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CB60381-CF25-41F1-B54B-CA0F1D77CEC5"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_meetingplace:7.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B746BD5-7783-4510-9260-88E6865277A0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}