CVE-2021-1363
published 2021-05-06CVE-2021-1363: Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated…
PriorityP351high8.1CVSS 3.1
AVNACLPRLUINSUCHIHAN
EPSS
1.08%
61.7th percentile
Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted parameters. An attacker could exploit these vulnerabilities by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain data or modify data that is stored in the underlying database.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_unified_communications_manager_im_and_presence_service | — | — |
| cisco | unified_communications_manager_im_amp_presence_service | — | — |
| cisco | unified_communications_manager_im_and_presence_service | >= 10.5 < 11.5\(1\)su9 | 11.5\(1\)su9 |
| cisco | unified_communications_manager_im_and_presence_service | >= 12.0 < 12.5\(1\)su4 | 12.5\(1\)su4 |
CVSS provenance
nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N
vendor_cisco7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
vendor_cisco·2021-05-05·CVSS 7.1
CVE-2021-1363 [HIGH] CWE-89 Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
These vulnerabilities are due to improper validation of user-submitted parameters. An attacker could exploit these vulnerabilities by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain data or modify data that is stored in the underlying database.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This adv
Cisco
Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
vendor_cisco·CVSS 3.1
CVE-2021-1363 Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
CVE-2021-1363: Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted parameters. An attacker could exploit these vulnerabilities by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain data or modify data that is stored in the underlying database. Cisco has released software updates that address these vulnerabilities. There are no
CVSS: 3.1
CWE: CWE-89, CWE-89
Bug IDs: CSCv
GHSA
GHSA-5cvv-whmf-q35w: Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authentica
ghsa_unreviewed·2022-05-24
CVE-2021-1363 [HIGH] CWE-89 GHSA-5cvv-whmf-q35w: Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authentica
Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted parameters. An attacker could exploit these vulnerabilities by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain data or modify data that is stored in the underlying database.
No detection rules found.
No public exploits indexed.
Talos
Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-SeeNet
blogs_talos·2021-11-22·CVSS 7.8
[HIGH] Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-SeeNet
Yuri Kramarz discovered these vulnerabilities.
Cisco Talos recently discovered multiple vulnerabilities in the Advantech R-SeeNet monitoring software.
R-SeeNet is the software system used for monitoring Advantech routers. It continuously collects information from individual routers in the network and records the data into a SQL database. The vulnerabilities Talos discovered exist in various scripts inside of R-SeeNet's web applications.
TALOS-2021-1366 (several CVEs, please refer to advisory for more information), TALOS-2021-1365 (CVE-2021-21920, CVE-2021-21921, CVE-2021-21922, CVE-2021-21923), TALOS-2021-1363(CVE-2021-21915, CVE-2021-21916, CVE-2021-21917) and TALOS-2021-1364 (CVE-2021-21918, CVE-2021-21919) are SQL injection vulnerabilities that exist in various R-SeeNet pages.There i
Talos
Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-SeeNet
blogs_talos·2021-11-22·CVSS 7.8
[HIGH] Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-SeeNet
## Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-SeeNet
Yuri Kramarz discovered these vulnerabilities.
Cisco Talos recently discovered multiple vulnerabilities in the Advantech R-SeeNet monitoring software.
R-SeeNet is the software system used for monitoring Advantech routers. It continuously collects information from individual routers in the network and records the data into a SQL database. The vulnerabilities Talos discovered exist in various scripts inside of R-SeeNet's web applications.
TALOS-2021-1366 (several CVEs, please refer to advisory for more information), TALOS-2021-1365 (CVE-2021-21920, CVE-2021-21921, CVE-2021-21922, CVE-2021-21923), TALOS-2021-1363 (CVE-2021-21915, CVE-2021-21916, CVE-2021-21917) and TALOS-2021-1364 (CVE-2021-21918, CVE-2021-21919) a
2021-05-06
Published