WID-SEC-2026-2935 — Cisco Unified Intelligence Center: Schwachstelle ermöglicht SQL-Injection

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Unified Intelligence Center ausnutzen, um einen SQL-Injection Angriff durchzuführen.

Product

Cisco Unified Intelligence Center ist eine webbasierte Berichtsanwendung für Contact Center.

Vulnerabilities 1

Medium 6.5

CVE-2026-20327

Cisco Unified Intelligence Center SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of…

Cisco Cisco Unified Intelligence Center Network devices

Aug 19, 2026

Revision history

2026-08-19 #1
Initiale Fassung

References

Cisco Security Advisory cisco-sa-cuic-sql-inject-2qbfWSm5 vom 2026-08-19
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-sql-inject-2qbfWSm5