Medium severity · published Apr 8, 2021
CVE-2021-1475
Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
4.1
CVSS
0.8%
EPSS
No
On KEV
Description
Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
Cisco Umbrella Insights Virtual Appliance · Cisco
All versions, or not specified · source: vendor
UM
Umbrella · Cisco
All versions, or not specified · source: NVD
Affected product
CU
Cisco Umbrella Insights Virtual Appliance
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-1475
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-1475
Patch
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T
More from Cisco Umbrella Insights Virtual Appliance
9.8
CVE-2022-20738
Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability
8.6
CVE-2021-1474
Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
7.5
CVE-2022-20773
Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability
6.5
CVE-2022-20922
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote…
6.0
CVE-2026-20246
Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability