Cisco Cloud Web Security SQL Injection Vulnerability

Cisco Cloud Web Security is a comprehensive cloud-delivered web defense solution. A SQL injection vulnerability exists in the web UI of Cisco Cloud Web Security. The vulnerability stems from the web management interface failing to properly validate SQL values. An authenticated attacker can exploi...

PT-2020-1879

Name of the Vulnerable Software and Affected Versions Cisco Cloud Web Security CWS affected versions not specified Description A vulnerability in the web UI of Cisco Cloud Web Security could allow an authenticated, remote attacker to execute arbitrary SQL queries. This issue exists due to imprope...