Critical severity9.8NVD Advisory· Published Mar 19, 2018· Updated Jun 17, 2026

CVE-2014-2652

Description

SQL injection vulnerability in OpenScape Deployment Service (DLS) before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

Unify/Openscape Deployment Service2 versions
cpe:2.3:a:unify:openscape_deployment_service:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:unify:openscape_deployment_service:*:*:*:*:*:*:*:*range: <6.0
- cpe:2.3:a:unify:openscape_deployment_service:7.0:*:*:*:*:*:*:*
Unify/OpenScape Deployment Service (DLS)llm-fuzzy
Range: <6.x and <7.x R1.11.3
Openscad/openscadllm-fuzzy
Range: <6.x and <7.x R1.11.3

Patches

Vulnerability mechanics

References

networks.unify.com/security/advisories/OBSO-1404-01.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000