CVE-2021-1475
Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.5EPSS 0.7%KEV nãoPoC —Patch referenciado
Ciclo de vida
08 abr 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Productos afectados
Cisco · Cisco Umbrella Insights Virtual Appliance¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →