← Database

CVE-2021-42369

CRITICAL CVSS: 9.9 Published: 2021-10-14 Modified: 2026-06-17

Description

Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject a SQL statement through the "Export to CSV" feature of the Contact Manager web GUI.

Affected Platforms

Zucchetti Imagicle Uc Suite

Weakness Type

CWE-89

References