Cisco Unified Intelligence Center
Monthly
Blind SQL injection in Cisco Unified Intelligence Center's web-based management interface allows an authenticated low-privilege user to extract the full contents of the internal database over the network. The flaw (CWE-89) stems from insufficient input validation in a network-accessible endpoint, confirmed by Cisco in advisory cisco-sa-cuic-sql-inject-2qbfWSm5. No active exploitation has been identified and no public exploit code is known at time of analysis.
Blind SQL injection in Cisco Unified Intelligence Center's web-based management interface allows an authenticated low-privilege user to extract the full contents of the internal database over the network. The flaw (CWE-89) stems from insufficient input validation in a network-accessible endpoint, confirmed by Cisco in advisory cisco-sa-cuic-sql-inject-2qbfWSm5. No active exploitation has been identified and no public exploit code is known at time of analysis.