{"id":"CVE-2021-1475","state":"PUBLISHED","title":"Cisco Umbrella Link and CSV Formula Injection Vulnerabilities","description":"Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.","publishedAt":"2021-04-08T04:07:09.181Z","updatedAt":"2024-11-08T23:26:37.493Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","source":"cisco"},"assigner":"cisco","products":["Cisco Cisco Umbrella Insights Virtual Appliance"],"affected":[{"vendor":"Cisco","product":"Cisco Umbrella Insights Virtual Appliance","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T"],"weaknesses":["CWE-1236"],"ingestedAt":"2026-10-29T19:47:52.848Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/1xxx/CVE-2021-1475.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-1475","state":"PUBLISHED","datePublished":"2021-04-08T04:07:09.181Z","dateUpdated":"2024-11-08T23:26:37.493Z","assignerShortName":"cisco","assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","dateReserved":"2020-11-13T00:00:00.000Z"},"containers":{"cna":{"title":"Cisco Umbrella Link and CSV Formula Injection Vulnerabilities","descriptions":[{"lang":"en","value":"Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."}],"affected":[{"vendor":"Cisco","product":"Cisco Umbrella Insights Virtual Appliance","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T","name":"20210407 Cisco Umbrella Link and CSV Formula Injection Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1236","description":"CWE-1236","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"cisco","dateUpdated":"2021-04-08T04:07:09.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633"},"datePublic":"2021-04-07T00:00:00.000Z","exploits":[{"lang":"en","value":"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}],"source":{"advisory":"cisco-sa-umbrella-inject-gbZGHP5T","defect":[["CSCvx27753","CSCvx28555"]],"discovery":"INTERNAL"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","DATE_PUBLIC":"2021-04-07T16:00:00","ID":"CVE-2021-1475","STATE":"PUBLIC","TITLE":"Cisco Umbrella Link and CSV Formula Injection Vulnerabilities"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Cisco Umbrella Insights Virtual Appliance","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"Cisco"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."}]},"exploit":[{"lang":"en","value":"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}],"impact":{"cvss":{"baseScore":"6.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-1236"}]}]},"references":{"reference_data":[{"name":"20210407 Cisco Umbrella Link and CSV Formula Injection Vulnerabilities","refsource":"CISCO","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T"}]},"source":{"advisory":"cisco-sa-umbrella-inject-gbZGHP5T","defect":[["CSCvx27753","CSCvx28555"]],"discovery":"INTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T","name":"20210407 Cisco Umbrella Link and CSV Formula Injection Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T16:11:17.380Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-11-08T20:45:26.135265Z","id":"CVE-2021-1475","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-08T23:26:37.493Z"}}]}}}