The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem software management tool allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the Web interface for managing Cisco Smart Software Manager On-Prem software licenses is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...