CP
Product
Cloudvision Portal
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 4Low 0
Watch
Add Cloudvision Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: 2024.2.0 through 2026.1.0 |
| CVE-2016-9012 | 8.8 | Jan 23 | CloudVision Portal (CVP) before 2016.1.2.1 allows remote authenticated users to gain access to the internal configuration mechanisms via the management plane, related to a request… Affected: through 2016.1.2.0 |
| CVE-2023-24546 | 8.1 | Jun 13 | On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to… Affected: 2021.1 through 2021.3; 2022.1.0; 2022.1.1; 2022.2.0; 2022.2.1; 2022.3.0 |
| CVE-2019-18181 | 7.8 | Dec 19 | In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls… Affected: 2018.1.0 through 2018.1.4; 2018.2.0 through 2018.2.3 |
| CVE-2020-13881 | 7.5 | Jun 6 | In support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used Affected: before 2020.1.2 |
| CVE-2019-17596 | 7.5 | Oct 24 | Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key Affected: 2018.1.0 through 2018.2.3; 2019.1.0; 2019.1.1; 2019.1.2 |
Showing 6