rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-3372 
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-23T16:00:00.000Z
CVE-2013-3373 
CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-23T16:00:00.000Z
CVE-2013-3374 
Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-23T16:00:00.000Z
CVE-2013-3375 
Cross-site scripting (XSS) vulnerability in the portal page in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCue23798.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-14T10:00:00.000Z
CVE-2013-3376 
Open redirect vulnerability in the help page in Cisco Video Surveillance Operations Manager allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCty74490.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-14T10:00:00.000Z
CVE-2013-3377 
Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-21T10:00:00.000Z
CVE-2013-3378 
Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device hang) via crafted SIP packets, aka Bug ID CSCuf89557.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-21T10:00:00.000Z
CVE-2013-3379 
The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privileges by leveraging connectivity to the management network, aka Bug ID CSCts37781.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-21T10:00:00.000Z
CVE-2013-3380 
The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-12T01:00:00.000Z
CVE-2013-3381 
Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP packets on port 162, aka Bug ID CSCug85756.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-12T01:00:00.000Z
CVE-2013-3382 
The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (device reload or traffic-processing outage) via fragmented (1) IPv4 or (2) IPv6 traffic, aka Bug ID CSCue88387.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-26T19:00:00.000Z
CVE-2013-3383 
The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL sent over IPv4, aka Bug ID CSCzv69294.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-27T21:00:00.000Z
CVE-2013-3384 
The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management Appliance devices before 7.2.2-110, 7.7 before 7.7.0-213, and 7.8 and 7.9 before 7.9.1-102 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL, aka Bug IDs CSCzv85726, CSCzv44633, and CSCzv24579.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-27T21:00:00.000Z
CVE-2013-3385 
The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-602; Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019; and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers to cause a denial of service (system hang) via a series of (1) HTTP or (2) HTTPS requests to a management interface, aka Bug IDs CSCzv58669, CSCzv63329, and CSCzv78669.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-27T21:00:00.000Z
CVE-2013-3386 
The IronPort Spam Quarantine (ISQ) component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers to cause a denial of service (service crash or hang) via a high rate of TCP connection attempts, aka Bug IDs CSCzv25573 and CSCzv81712.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-27T21:00:00.000Z
CVE-2013-3387 
Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (disk consumption) via a flood of TCP packets to port 5400, leading to large error-log files, aka Bug ID CSCua42724.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2013-3388 
Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets to port 44444, aka Bug ID CSCtz92776.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2013-3389 
Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets to port (1) 61615 or (2) 61616, aka Bug ID CSCtz90114.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2013-3390 
Memory leak in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets, aka Bug ID CSCub59158.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2013-3392 
Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405 and CSCuh10355.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-21T21:00:00.000Z
CVE-2013-3393 
The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service (process crash and call disconnection) via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-26T19:00:00.000Z
CVE-2013-3394 
Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted field, aka Bug ID CSCuh41429.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-27T02:00:00.000Z
CVE-2013-3395 
Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuh70263, CSCuh70323, and CSCuh26634.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-02T01:00:00.000Z
CVE-2013-3396 
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance (SMA) devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-26T21:00:00.000Z
CVE-2013-3397 
Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager (CUCM) allows remote attackers to hijack the authentication of arbitrary users for requests that perform Unified Serviceability actions, aka Bug ID CSCuh10298.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-26T21:00:00.000Z
CVE-2013-3398 
The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, aka Bug ID CSCuh64574.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-26T21:00:00.000Z
CVE-2013-3399 
Buffer overflow in an unspecified Android API on the Cisco Desktop Collaboration Experience DX650 allows attackers to execute arbitrary code via vectors that leverage incorrect memory allocation, aka Bug IDs CSCuf93957, CSCug22352, and CSCug22462.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-02T01:00:00.000Z
CVE-2013-3400 
The license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" arguments, aka Bug ID CSCuh30824.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T20:00:00.000Z
CVE-2013-3401 
The SIP implementation in Cisco TelePresence TC Software allows remote attackers to trigger unintended use of NOTIFY messages via unspecified vectors, aka Bug ID CSCud96080.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-02T01:00:00.000Z
CVE-2013-3402 
An unspecified function in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitrary commands via unknown vectors, aka Bug ID CSCuh73440.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T00:00:00.000Z
CVE-2013-3403 
Multiple untrusted search path vulnerabilities in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allow local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCuh73454.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T00:00:00.000Z
CVE-2013-3404 
SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, leading to discovery of encrypted credentials by leveraging metadata, aka Bug ID CSCuh01051.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T00:00:00.000Z
CVE-2013-3405 
The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who has not configured a password, which allows remote attackers to bypass authentication by sending an arbitrary password, aka Bug ID CSCud96071.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T20:00:00.000Z
CVE-2013-3406 
The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-16T02:00:00.000Z
CVE-2013-3407 
The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information via a direct request, aka Bug ID CSCug65664.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-16T02:00:00.000Z
CVE-2013-3408 
The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T21:00:00.000Z
CVE-2013-3409 
The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to read these files, aka Bug IDs CSCuh33735 and CSCuh34230.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-10T10:00:00.000Z
CVE-2013-3410 
Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T00:00:00.000Z
CVE-2013-3411 
The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service (device hang) via malformed IPv4 TCP packets, aka Bug ID CSCuh27460.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T00:00:00.000Z
CVE-2013-3412 
SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuh81766.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T00:00:00.000Z
CVE-2013-3413 
Cross-site scripting (XSS) vulnerability in the search form in the administration/monitoring panel on the Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuh87036.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-04T10:00:00.000Z
CVE-2013-3414 
Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-25T15:00:00.000Z
CVE-2013-3415 
Cisco Adaptive Security Appliance (ASA) Software 8.4.x before 8.4(3) and 8.6.x before 8.6(1.3) does not properly manage memory upon an AnyConnect SSL VPN client disconnection, which allows remote attackers to cause a denial of service (memory consumption, and forwarding outage or system hang) via packets to the disconnected machine's IP address, aka Bug ID CSCtt36737.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-3416 
Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Operations Manager and Unified Service Monitor allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuh47574 and CSCuh95997.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T21:00:00.000Z
CVE-2013-3417 
The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remote attackers to watch video feeds via a crafted URL, aka Bug ID CSCtg72262.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T10:00:00.000Z
CVE-2013-3418 
Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service (memory consumption and process crash) via crafted requests to the management interface, aka Bug ID CSCud22922.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-11T22:00:00.000Z
CVE-2013-3419 
Cross-site scripting (XSS) vulnerability in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh74981.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-11T22:00:00.000Z
CVE-2013-3420 
Cross-site request forgery (CSRF) vulnerability in the web framework on the Cisco Identity Services Engine (ISE) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-17T21:00:00.000Z
CVE-2013-3421 
Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-12T21:00:00.000Z
CVE-2013-3422 
Cross-site scripting (XSS) vulnerability in Administration pages in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-12T21:00:00.000Z
CVE-2013-3423 
Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCud75174.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-12T21:00:00.000Z
CVE-2013-3424 
Cross-site request forgery (CSRF) vulnerability in Administration and View pages in Cisco Secure Access Control System (ACS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-12T21:00:00.000Z
CVE-2013-3425 
The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-31T01:00:00.000Z
CVE-2013-3426 
The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-17T21:00:00.000Z
CVE-2013-3428 
The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-15T15:00:00.000Z
CVE-2013-3429 
Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-25T15:00:00.000Z
CVE-2013-3430 
Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37288.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-25T15:00:00.000Z
CVE-2013-3431 
Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-25T15:00:00.000Z
CVE-2013-3433 
Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02276.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T00:00:00.000Z
CVE-2013-3434 
Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02242.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T00:00:00.000Z
CVE-2013-3435 
The Cisco Unified IP Conference Station 7937G allows remote attackers to cause a denial of service (networking outage) via a flood of TCP packets, aka Bug ID CSCuh42052.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-22T14:00:00.000Z
CVE-2013-3436 
The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui07698.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T22:00:00.000Z
CVE-2013-3437 
SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-22T14:00:00.000Z