References https://nvd.nist.gov/vuln/detail/CVE-2023-20211 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-injection-g6MbwH2 https://access.redhat.com/security/cve/CVE-2023-20211 https://www.cve.org/CVERecord?id=CVE-2023-20211 https://blog.stmcyber.com/vulns/cve-2023-20211/ https://www.cvedetails.com/cve/CVE-2023-20211/ https://malware.news/t/what-you-need-to-know-about-cisco-unified-communications-manager-sql-injection-vulnerability-cve-2023-20211/72484 https://socradar.io/blog/what-you-need-to-know-about-cisco-unified-communications-manager-sql-injection-vulnerability-cve-2023-20211/ https://github.com/advisories/GHSA-q3jq-p92h-xjrr https://cve.circl.lu/vuln/fkie_cve-2023-20211
Related VulnerabilitiesCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassCisco Catalyst SD-WAN身份验证绕过漏洞Cisco Catalyst SD-WAN 权限绕过漏洞(CVE-2026-20127)Cisco Asyncos 整数溢出漏洞 可导致远程代码执行PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster EnumerationCisco Any Router and Switch 默认口令漏洞Cisco IOS 缓冲区溢出漏洞PoCCVE-2024-20404: Cisco Finesse - Server-Side Request Forgery (SSRF)Cisco IOS XE Software 命令注入漏洞