CVE-2023-20110: A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to…

medium6.5CVSS 3.1

AVNACLPRLUINSUCHINAN

A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface inadequately validates user input. An attacker could exploit this vulnerability by authenticating to the application as a low-privileged user and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to read sensitive data on the underlying database.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_smart_software_manager_on-prem	—	—
cisco	smart	—	—
cisco	smart_software_manager_on-prem	< 8-202303	8-202303