Medium severity6.5NVD Advisory· Published Nov 26, 2019· Updated Jun 17, 2026

CVE-2019-15995

Description

A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web UI does not properly validate user-supplied input. An attacker could exploit this vulnerability by entering malicious SQL statements in an affected field in the web UI. A successful exploit could allow the attacker to remove the SQL database, which would require the reinstallation of the Connector VM.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Dna Spaces
cpe:2.3:a:cisco:dna_spaces\:_connector:*:*:*:*:*:*:*:*
Range: <2.0
Cisco Systems, Inc./Spaces Connectorllm-fuzzy
Cisco/Cisco DNA Spacesv5
Range: unspecified

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-dna-sqlinjectionnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000