AS
Product
Anyconnect Secure Mobility Client
On CISA KEVExploited in the wildRansomware-linked
69
CVEs
2
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 19Medium 19Low 0
Watch
Add Anyconnect Secure Mobility Client to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-8021 | – | Feb 3 | Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043) and earlier and Cisco HostScan Engine 3.1(.05183) and earlier allows remote… Affected: through 3.1\(.02043\) |
| CVE-2014-3314 | – | Jan 14 | Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via… Affected: All versions, or not specified |
| CVE-2013-5559 | – | Nov 4 | Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to… Affected: 2.0; 2.1; 2.2; 2.2.128; 2.2.133; 2.2.136; +34 more |
| CVE-2013-1130 | – | Sep 20 | Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a crafted library file, aka Bug… Affected: All versions, or not specified |
| CVE-2013-1173 | – | Apr 11 | Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges… Affected: 2.0; 2.1; 2.2; 2.2.128; 2.2.133; 2.2.136; +34 more |
| CVE-2013-1172 | – | Apr 11 | The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via… Affected: 2.0; 2.1; 2.2; 2.2.128; 2.2.133; 2.2.136; +34 more |
| CVE-2012-3094 | – | Sep 16 | The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without… Affected: 3.1.0 |
| CVE-2012-3088 | – | Sep 16 | Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote… Affected: 3.1.0; 3.2.0 |
| CVE-2012-2500 | – | Aug 6 | Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle… Affected: 3.0; 3.0.0629; 3.0.07059 |
| CVE-2012-2499 | – | Aug 6 | The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows… Affected: 3.0; 3.0.0629; 3.0.07059 |
| CVE-2012-2498 | – | Aug 6 | Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted… Affected: 3.0; 3.0.0629; 3.0.07059; 3.0.08057; 3.0.08066 |
| CVE-2012-1370 | – | Aug 6 | Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service (vpnagentd process crash) via a crafted packet, aka Bug… Affected: 3.0; 3.0.0629; 3.0.07059 |
| CVE-2012-2496 | – | Jun 20 | A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR7 on 64-bit Linux platforms does… Affected: 3.0 |
| CVE-2012-2495 | – | Jun 20 | The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of… Affected: 3.0 |
| CVE-2012-2494 | – | Jun 20 | The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 and 3.x before 3.0 MR8 does not compare the timestamp of… Affected: 2.0; 2.1; 2.2; 2.2.128; 2.2.133; 2.2.136; +10 more |
| CVE-2012-2493 | – | Jun 20 | The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8… Affected: 2.0; 2.1; 2.2; 2.2.128; 2.2.133; 2.2.136; +25 more |
| CVE-2011-2041 | – | Jun 2 | The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows… Affected: through 2.3.2016; 2.0; 2.1; 2.2; 2.2.128; 2.2.133; +4 more |
| CVE-2011-2040 | – | Jun 2 | The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a… Affected: through 2.5.2019; 2.0; 2.1; 2.2; 2.2.128; 2.2.133; +19 more |
| CVE-2011-2039 | – | Jun 2 | The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable… Affected: through 2.3; 2.0; 2.1; 2.2; 2.2.128; 2.2.133; +2 more |