CVE-2021-1474
Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
- State
- Published
- Severity
- 6.5 Medium
- Published
- Apr 8, 2021
- Updated
- Nov 8, 2024
- Reserved
- Nov 13, 2020
Description
Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco Umbrella Insights Virtual ApplianceCisco |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.