Beveiligingsadvies

CVE-2019-15995

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-11-26 03:41:50
Laatst bijgewerkt 2024-11-21 19:04:50
Toegewezen door cisco
CVSS-score 6.5
Status PUBLISHED

Beschrijving

A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web UI does not properly validate user-supplied input. An attacker could exploit this vulnerability by entering malicious SQL statements in an affected field in the web UI. A successful exploit could allow the attacker to remove the SQL database, which would require the reinstallation of the Connector VM.