Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:unified_intelligence_center:11.6\(1\):*:*:*:*:*:*:*

part: o version: 11.6(1) update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductUnified Intelligence Center (6cb1ff37-455b-5351-8e0f-1312ddb62880)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-20325 vulnerable 2026-06-08 06:27:22.555892 Details available
MEDIUM (5.1)
A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations on cluster configuration CLI requests. An attacker could exploit this vulnerability by sending a cluster configuration CLI request to specific directories on an affected device. A successful exploit could allow the attacker to read and modify data that is handled by an internal service on the affected device.
Published: 2024-02-21T16:09:03.422Z
Updated: 2024-08-27T21:08:46.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1658 vulnerable 2026-06-08 05:13:26.681240 Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability
MEDIUM (4.7)
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections in the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious, customized link. A successful exploit could allow the attacker to perform arbitrary actions on the affected device via a web browser and with the privileges of the user.
Published: 2019-01-24T16:00:00.000Z
Updated: 2024-11-21T19:47:09.847Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.