VDB
CVE-2020-3154
CVE-2020-3154
PUBLISHED
CVSS 4.900000095367432 MEDIUM
A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web-based management interface improperly validates SQL values. An authenticated attacker could exploit this vulnerability sending malicious requests to the affected device. An exploit could allow the attacker to modify values on or return values from the underlying database.
EPSS 0.25% · 48.0th percentile
Risk Scores
CVSS 3.0
4.900000095367432
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.25%
48.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | cloud_web_security | 5.2\(0\) |
| Cisco | Cisco Cloud Web Security | * |
Exploit Intelligence
Timeline
- Feb 19, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score