MEDIUM✓ PATCH🇬🇧 English

CVE-2021-1475

CVSS 6.5v3.1pub. 2021-04-08upd. 2024-11-21

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

  • Cisco Umbrella

    APP
    Cisco
    wszystkie wersje
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2018-0435CRITICAL9.1ten sam produkt

A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify dat...

CVE-2019-1807HIGH7.6ten sam produkt

A vulnerability in the session management functionality of the web UI for the Cisco Umbrella Dashboard could a...

CVE-2022-20969MEDIUM4.8ten sam produkt

A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote ...

CVE-2021-40126MEDIUM4.3ten sam produkt

A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to ...

CVE-2021-1474MEDIUM6.5ten sam produkt

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella...