Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco SD-WAN vManage SQL Injection Vulnerabilities
Vulnerability Description
Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities exist because the web-based management interface improperly validates values in SQL queries. An attacker could exploit these vulnerabilities by authenticating to the application and sending malicious SQL queries to an affected system. A successful exploit could allow the attacker to modify values on or return values from the underlying database or the operating system.
CVSS Information
N/A
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Cisco SD-WAN vManage Software SQL注入漏洞
Vulnerability Description
Cisco SD-WAN vManage Software是美国思科（Cisco）公司的一款用于SD-WAN（软件定义广域网络）解决方案的管理软件。 Cisco SD-WAN vManage Software 存在SQL注入漏洞，该漏洞源于基于web的管理界面不正确地验证SQL查询中的值。攻击者可利用该漏洞通过对应用程序进行身份验证并向受影响的系统发送恶意SQL查询。
CVSS Information
N/A
Vulnerability Type
N/A