Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a "deprecated page," aka Bug ID CSCup90168.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-0695
http://www.securitytracker.com/id/1032002
http://tools.cisco.com/security/center/viewAlert.x?alertId=38113