CVE-2020-3468

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values within SQL queries. An attacker could exploit this vulnerability by authenticating to the application and sending malicious SQL queries to an affected system. A successful exploit could allow the attacker to modify values on or return values from the underlying database or the operating system.

• CWE-89
• CWE-89

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-v78FubGVVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-v78FubGVVendor Advisory

Published

Jul 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3462A vulnerability in the web-based management interface of Cis…6.3
• CVE-2020-3463A vulnerability in the web-based management interface of Cis…6.1
• CVE-2020-3464A vulnerability in the web-based management interface of Cis…4.8
• CVE-2020-3465A vulnerability in Cisco IOS XE Software could allow an unau…6.5
• CVE-2020-3466Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2020-3467A vulnerability in the web-based management interface of Cis…7.7
• CVE-2020-3470Multiple vulnerabilities in the API subsystem of Cisco Integ…9.8
• CVE-2020-3471A vulnerability in Cisco Webex Meetings and Cisco Webex Meet…6.5
• CVE-2020-3472A vulnerability in the contacts feature of Cisco Webex Meeti…5
• CVE-2020-3473A vulnerability in task group assignment for a specific CLI …7.8
• CVE-2020-3474Multiple vulnerabilities in the web management framework of …8.1
• CVE-2020-3475Multiple vulnerabilities in the web management framework of …8.1