Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to…
Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Arista Networks
- Product
- EOS / CloudVision
- CVSS
- 6.5
- Exposure class
- Edge / VPN / firewall
Why it ranks 21 (Routine)
- CVSS 6.5 medium
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Arista Networks)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.