CVE-2026-20327

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to read the contents of the internal database of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-sql-inject-2qbfWSm5

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-19 17:18

Updated : 2026-08-20 13:01

NVD link : CVE-2026-20327

Mitre link : CVE-2026-20327

CVE.ORG link : CVE-2026-20327

JSON object : View

Products Affected

No product.

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2026-20327", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20327", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-19T19:18:33.635183Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Unified Intelligence Center", "versions": [{"status": "affected", "version": "11.6(1)"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "11.5(1)"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "11.0(2)"}, {"status": "affected", "version": "12.6(1)"}, {"status": "affected", "version": "12.5(1)SU"}, {"status": "affected", "version": "12.6(1)_ET"}, {"status": "affected", "version": "12.6(1)_ES05_ET"}, {"status": "affected", "version": "11.0(3)"}, {"status": "affected", "version": "12.6(2)"}, {"status": "affected", "version": "12.6(2)_504_Issue_ET"}, {"status": "affected", "version": "12.6.1_ExcelIssue_ET"}, {"status": "affected", "version": "12.6(2)_Permalink_ET"}, {"status": "affected", "version": "12.6.2_CSCwk19536_ET"}, {"status": "affected", "version": "12.6.2_CSCwm96922_ET"}, {"status": "affected", "version": "12.6.2_Amq_OOS_ET"}, {"status": "affected", "version": "12.5(2)ET_CSCwi79933"}, {"status": "affected", "version": "12.6(2)_ET"}, {"status": "affected", "version": "12.6.2_CSCwn48501_ET"}, {"status": "affected", "version": "15.0(1)"}, {"status": "affected", "version": "12.6.2_CSCwp61293_ET"}, {"status": "affected", "version": "15.0.1_CSCwn17585_ET"}, {"status": "affected", "version": "15.0(1)ES202508"}, {"status": "affected", "version": "12.6.2_CSCwp92614_ET"}, {"status": "affected", "version": "15.0(1)ES202511"}, {"status": "affected", "version": "12.6(2)ES6"}, {"status": "affected", "version": "15.0(1)ES202602"}, {"status": "affected", "version": "12.6(2)ES7"}, {"status": "affected", "version": "15.0(1)SU1"}, {"status": "affected", "version": "15.0.1_CSCwu05225_ET"}, {"status": "affected", "version": "15.0.1_CSCwu53931_ET"}, {"status": "affected", "version": "15.0.1_CSCwu75294_ET"}], "defaultStatus": "unknown"}]}], "published": "2026-08-19T17:18:40.563", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-sql-inject-2qbfWSm5", "source": "psirt@cisco.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to read the contents of the internal database of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device."}], "lastModified": "2026-08-20T13:01:19.947", "sourceIdentifier": "psirt@cisco.com"}