Логотип exploitDog
bind:CVE-2021-1399
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-1399

Количество 3

Количество 3

nvd логотип

CVE-2021-1399

почти 5 лет назад

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The vulnerability is due to insufficient validation of user-supplied data to the Self Care Portal. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to modify information without proper authorization.

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-wpj5-cw66-j932

больше 3 лет назад

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The vulnerability is due to insufficient validation of user-supplied data to the Self Care Portal. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to modify information without proper authorization.

EPSS: Низкий
fstec логотип

BDU:2021-02027

почти 5 лет назад

Уязвимость портала самообслуживания систем обработки вызовов Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, позволяющая нарушителю оказать воздействие на целостность данных

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-1399

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The vulnerability is due to insufficient validation of user-supplied data to the Self Care Portal. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to modify information without proper authorization.

CVSS3: 4.3
0%
Низкий
почти 5 лет назад
github логотип
GHSA-wpj5-cw66-j932

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The vulnerability is due to insufficient validation of user-supplied data to the Self Care Portal. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to modify information without proper authorization.

0%
Низкий
больше 3 лет назад
fstec логотип
BDU:2021-02027

Уязвимость портала самообслуживания систем обработки вызовов Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, позволяющая нарушителю оказать воздействие на целостность данных

CVSS3: 4.3
0%
Низкий
почти 5 лет назад

Уязвимостей на страницу