Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-1475 EUVD-2021-6942GHSA-639r-6p24-c5mm

Cisco Umbrella Link and CSV Formula Injection Vulnerabilities

Published Apr 8, 2021 · Updated Nov 8, 2024 · Assigned by cisco

Description

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

VendorProductAffectedFixed
Cisco Cisco Umbrella Insights Virtual Appliance — —

References