CVE-2021-42369

ALTO 8.8CVE-2021-42369 · Published 14/10/2021 · updated 17/06/2026

In breve

CVE-2021-42369 è una vulnerabilità ALTO (CVSS 8.8) che riguarda imagicle uc suite (zucchetti).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 64.3% delle vulnerabilità.
Correzione: aggiornare a 2021.summer.2 o successiva.

Package	Affected versions	Patched versions
imagicle uc suite zucchetti	`< 2021.summer.2`	`2021.summer.2`

Description

Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject a SQL statement through the "Export to CSV" feature of the Contact Manager web GUI.

References

dawid-czarnecki/public-vulnerabilities · Third Party Advisory
imagicle.com/en/resources/download · Vendor Advisory
zigrin.com/advisories/imagicle-sql-injection-vulnerability-in-contacts-csv-export

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free