Cisco Dna Spaces vulnerabilities
3 known vulnerabilities affecting cisco/cisco_dna_spaces.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2019-15995P3MEDIUMCVSS 6.5≥ unspecified, < n/a2019-11-26
CVE-2019-15995 [MEDIUM] CWE-89 CVE-2019-15995: A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote at
A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web UI does not properly validate user-supplied input. An attacker could exploit this vulnerability by entering malicious SQL statements in an affected field in the web UI. A
nvd
CVE-2019-15997P3MEDIUMCVSS 6.7≥ unspecified, < n/a2019-11-26
CVE-2019-15997 [MEDIUM] CWE-20 CVE-2019-15997: A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perfo
A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command. An attacker could exploit this vulnerability by
nvd
CVE-2019-15996P3MEDIUMCVSS 6.7≥ unspecified, < n/a2019-11-26
CVE-2019-15996 [MEDIUM] CWE-264 CVE-2019-15996: A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to eleva
A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient restrictions during the execution of an affected CLI command. An attacker could exploit this vulnerability by leveraging
nvd