CVE-2021-1475
Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.5EPSS 0.7%KEV nãoPoC —Patch referenciado
Lifecycle
08 Apr 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
Cisco · Cisco Umbrella Insights Virtual ApplianceWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →