Zurück zur CVE-Übersicht
CVE-2026-20300
HIGH(7.1)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Risk Signal Score28/100 — MITTEL
- CVSS 7.1 — Hoch
- Weniger als 24 Stunden alt
Erwähnungen (letzte 60 Tage)
Artikel
Beschreibung
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to read or modify data in the underlying database.
Erkennung & Indikatoren
Ausnutzung
In den geprüften Quellen nicht genannt