High severity · published Apr 8, 2021
CVE-2021-1474
Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
8.6
CVSS
0.7%
EPSS
No
On KEV
Description
Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
Cisco Umbrella Insights Virtual Appliance · Cisco
All versions, or not specified · source: vendor
UM
Umbrella · Cisco
All versions, or not specified · source: NVD
Affected product
CU
Cisco Umbrella Insights Virtual Appliance
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-1474
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-1474
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T
More from Cisco Umbrella Insights Virtual Appliance
9.8
CVE-2022-20738
Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability
7.5
CVE-2022-20773
Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability
6.5
CVE-2022-20922
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote…
6.0
CVE-2026-20246
Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
5.8
CVE-2026-20221
Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities