CVE-2019-15995 - CVE House
Back to Database
Status published Medium CVE-2019-15995

Cisco DNA Spaces: Connector SQL Injection Vulnerability

Vulnerability Description

A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web UI does not properly validate user-supplied input. An attacker could exploit this vulnerability by entering malicious SQL statements in an affected field in the web UI. A successful exploit could allow the attacker to remove the SQL database, which would require the reinstallation of the Connector VM.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-15995

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Cisco DNA Spaces
Vulnerable Versions:
unspecified

Timeline

Official Publish: November 26th, 2019
Last Modified: November 21st, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)