attack_type:sql_injection × latest_source_host:sec.cloudapps.cisco.com × limpar

Resultados

2 casos · pág. 1/1

sec.cloudapps.cisco.com · há 1d medium

Cisco patches authenticated blind SQL injection in Unified Intelligence Center web management interface (CVE-2026-20327)

Cisco disclosed CVE-2026-20327, a blind SQL injection vulnerability in the web-based management interface of Cisco Unified Intelligence Center. An authenticated, local attacker could send a crafted request and read the contents of the device's internal database. Cisco rates the Security Impact as Medium. Software updates are available and…

CVE-2026-20327

sec.cloudapps.cisco.com · há 1d critical

Cisco releases hardening fixes for Secure Email Gateway and Web Manager; two internally found flaws actively exploited

Cisco published a security hardening release for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager (September 2026), fixing multiple vulnerabilities found during an internal security review. Cisco states that two of them are known to be actively exploited. They are described in separate advisories as a SQL injection and an…

CVE-2026-20353 CVE-2026-76440 CVE-2026-76441