Vulnerabilities > Cisco > Unified Intelligence Center > 12.6.1

DATE CVE VULNERABILITY TITLE RISK
2023-03-03 CVE-2023-20061 Exposure of Resource to Wrong Sphere vulnerability in Cisco products
Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system.
network
low complexity
cisco CWE-668
6.5
6.5
2023-03-03 CVE-2023-20062 Server-Side Request Forgery (SSRF) vulnerability in Cisco products
Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system.
network
low complexity
cisco CWE-918
4.3
4.3
2023-01-20 CVE-2023-20058 Cross-site Scripting vulnerability in Cisco products
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input.
network
low complexity
cisco CWE-79
6.1
6.1
2021-12-10 CVE-2021-44228 Deserialization of Untrusted Data vulnerability in multiple products
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. 		10.0
10