CVE-2021-42369: Zucchetti Imagicle Uc Suite

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject a SQL statement through the "Export to CSV" feature of the Contact Manager web GUI.

Affected products

• Zucchetti Imagicle Uc Suite: before 2021.summer.2 (fixed in 2021.summer.2)

Published 2021-10-14. Last modified 2026-06-17.