⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2016-1393

HIGH · 7.1 CVSS Gepubliceerd: 12-05-2016 CWE-89

Beschrijving

SQL injection vulnerability in Cisco Cloud Network Automation Provisioner (CNAP) 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175.

Vendors

Cisco

Affected products

Cloud Network Automation Provisioner

References

tools.cisco.com
www.securityfocus.com