MEDIUM✓ PATCH🇬🇧 English

CVE-2021-1474

CVSS 6.5v3.1pub. 2021-04-08upd. 2024-11-21

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Cisco Umbrella
APP
Cisco
wszystkie wersje

🟢

PATCH DOSTĘPNY

Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.

CWE

CWE-1236

Referencje

tools.cisco.com/security/center/content/CiscoSecurityAd…

Powiązane podatności

CVE-2018-0435CRITICAL9.1ten sam produkt

A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify dat...

CVE-2019-1807HIGH7.6ten sam produkt

A vulnerability in the session management functionality of the web UI for the Cisco Umbrella Dashboard could a...

CVE-2022-20969MEDIUM4.8ten sam produkt

A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote ...

CVE-2021-40126MEDIUM4.3ten sam produkt

A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to ...

CVE-2021-1475MEDIUM6.5ten sam produkt

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella...