Cisco Dna Spaces
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:cisco_dna_spaces:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Cisco Dna Spaces (bf686c77-2e8f-5385-b735-32c2bf7f26b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-15997 |
vulnerable | 2026-06-08 05:13:07.492588 |
Cisco DNA Spaces: Connector Command Injection Vulnerability
MEDIUM (6.7)
A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command. An attacker could exploit this vulnerability by including malicious input during the execution of the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as root.
Published: 2019-11-26T03:41:38.520Z
Updated: 2024-11-20T17:04:14.513Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15996 |
vulnerable | 2026-06-08 05:13:07.491984 |
Cisco DNA Spaces: Connector Privilege Escalation Vulnerability
MEDIUM (6.7)
A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient restrictions during the execution of an affected CLI command. An attacker could exploit this vulnerability by leveraging the insufficient restrictions to modify sensitive files. A successful exploit could allow the attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.
Published: 2019-11-26T03:41:44.399Z
Updated: 2024-11-20T17:04:07.686Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15995 |
vulnerable | 2026-06-08 05:13:07.490940 |
Cisco DNA Spaces: Connector SQL Injection Vulnerability
MEDIUM (6.5)
A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web UI does not properly validate user-supplied input. An attacker could exploit this vulnerability by entering malicious SQL statements in an affected field in the web UI. A successful exploit could allow the attacker to remove the SQL database, which would require the reinstallation of the Connector VM.
Published: 2019-11-26T03:41:50.505Z
Updated: 2024-11-21T19:04:50.844Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.