CloudVision CUE vulnerabilities

An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service.

Improper validation of selected CloudVision CUE API request parameters may allow an authenticated network user to perform SQL injection against the backend, impacting its availability.

An IDOR vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data.