{"id":"CVE-2026-20327","revision":"61ea8acdaf244463829ad4092da6c43f","records":[{"revision":"61ea8acdaf244463829ad4092da6c43f","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-20327","aliases":[],"title":"Cisco Unified Intelligence Center SQL Injection Vulnerability","description":"A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to read the contents of the internal database of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.","state":0,"publishedAt":"2026-08-19T16:22:04.42+00:00","modifiedAt":"2026-10-20T18:23:51.177+00:00","affected":[{"ecosystem":"Vendor product","name":"Cisco Unified Intelligence Center","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cisco\",\n                    \"product\": \"Cisco Unified Intelligence Center\",\n                    \"versions\": [\n                        {\n                            \"version\": \"11.6(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"11.0(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"11.5(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.0(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.5(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"11.0(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.5(1)SU\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6(1)_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6(1)_ES05_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"11.0(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6(2)_504_Issue_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6.1_ExcelIssue_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6(2)_Permalink_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6.2_CSCwk19536_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6.2_CSCwm96922_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6.2_Amq_OOS_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.5(2)ET_CSCwi79933\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6(2)_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6.2_CSCwn48501_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6.2_CSCwp61293_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1_CSCwn17585_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0(1)ES202508\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6.2_CSCwp92614_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0(1)ES202511\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6(2)ES6\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0(1)ES202602\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.6(2)ES7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0(1)SU1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1_CSCwu05225_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1_CSCwu53931_ET\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1_CSCwu75294_ET\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","score":6.5,"severity":"MEDIUM"}],"references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-sql-inject-2qbfWSm5"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-20327","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-20327","identifiers":["CVE-2026-20327"]},"retained":false,"historicalAffected":[]}],"coverage":[]}