CVE-2024-20325

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations o...

Improper access control

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations o...

CVE-2024-20325

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations o...

CVE-2024-20325

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations o...

CVE-2024-20325

Cisco’s CVE-2024-20325 affects the Live Data server in Cisco Unified Intelligence Center. The issue arises from insufficient access control on cluster-configuration CLI requests, allowing an unauthenticated, local attacker to send privileged commands to specific directories and read/modify data i...

Cisco Unified Intelligence Center Insufficient Access Control Vulnerability

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations o...

PT-2024-1860 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center affected versions not specified Description: A vulnerability in the Live Data server could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service ...

Cisco Unified Intelligence Center Security Vulnerabilities

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides for the presentation of report-related business data and call center data. A security vulnerability exists in Cisco Unified Intelligence Center, which stems from...

The vulnerability of the Cisco Unified Intelligence Center reporting software lies in the lack of protection for operational data, which allows attackers to execute SSRF attacks and expose the protected information.

The vulnerability of the Cisco Unified Intelligence Center reporting software lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to perform SSRF attacks and disclose sensitive information through a specially crafted HTTP request...

The vulnerability of the application software interface for creating Cisco Unified Intelligence Center reports allows a intruder to gain unauthorized access to the device.

The vulnerability of the application programming interface for creating Cisco Unified Intelligence Center reports is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device...

Cisco Unified Intelligence Center Vulnerabilities (cisco-sa-cuic-infodisc-ssrf-84ZBmwVk)

The version of Cisco Unified Intelligence Center installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cisco-sa-cuic-infodisc-ssrf-84ZBmwVk advisory: - A vulnerability in the web-based management interface of Cisco...

The vulnerability in the web interface of the software for creating Cisco Unified Intelligence Center reports allows a perpetrator to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Unified Intelligence Center software for creating reports exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2023-20062

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery SSRF attack on an affected system. Cisco plans to release software updates that address these vulnerabilities...

CVE-2023-20061

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery SSRF attack on an affected system. Cisco plans to release software updates that address these vulnerabilities...

Cisco Unified Intelligence Center 代码问题漏洞

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides the ability to present report-related business data and call center data. A code issue vulnerability exists in Cisco Unified Intelligence Center. An attacker cou...

CVE-2023-20062 Cisco Unified Intelligence Center Vulnerabilities

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery SSRF attack on an affected system. Cisco plans to release software updates that address these vulnerabilities...

Cisco Unified Intelligence Center 安全漏洞

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides the ability to present report-related business data and call center data. A security vulnerability exists in Cisco Unified Intelligence Center. An attacker could...

CVE-2023-20061

Cisco Unified Intelligence Center (CUIC) is affected by CVE-2023-20061 (and related CVE-2023-20062 per Cisco advisory) where an authenticated, remote attacker could either access sensitive information or perform a server-side request forgery (SSRF) due to deficiencies in REST API output handling ...

CVE-2023-20062

CVE-2023-20062 concerns Cisco Unified Intelligence Center. The described issues allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) against an affected system. The root cause is described in connected advisories as improper inpu...

CVE-2023-20062

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery SSRF attack on an affected system. Cisco plans to release software updates that address these vulnerabilities...