CS
Product
Catalyst SD-WAN Manager
On CISA KEVExploited in the wild
92
CVEs
9
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 10High 37Medium 45Low 0
Watch
Add Catalyst SD-WAN Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20262 In wildKEV | 6.5 | Jun 15 | Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability Affected: before 20.9.9.2; 20.10 before 20.12.7.2; 20.13 before 20.15.4.5; 20.15.5 before 20.15.5.3; 20.16 before 20.18.3.1; 26.1 before 26.1.1.2 |
| CVE-2026-20122 In wildKEV | 5.4 | Feb 25 | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability Affected: before 20.9.8.2; 20.10 before 20.12.5.3; 20.13 before 20.15.4.2; 20.16 before 20.18.2.1; 20.12.6 |
| CVE-2021-1462 | 6.7 | Nov 18 | A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +33 more |
| CVE-2022-20930 | 6.7 | Sep 30 | Cisco SD-WAN Software Arbitrary File Corruption Vulnerability Affected: 20.8; 20.9 |
| CVE-2025-20187 | 6.5 | May 7 | A vulnerability in the application data endpoints of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to write arbitrary… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2020-26066 | 6.5 | Nov 18 | A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2021-1232 | 6.5 | Nov 18 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2021-1491 | 6.5 | Nov 15 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2021-1484 | 6.5 | Nov 15 | A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitrary commands on an affected system and cause a… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2023-20261 | 6.5 | Oct 18 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2020-26065 | 6.5 | Aug 4 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2022-20747 | 6.5 | Apr 15 | A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected system Affected: 20.7 |
| CVE-2022-20735 | 6.5 | Apr 15 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: 20.7 |
| CVE-2021-34712 | 6.5 | Sep 23 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct cypher query language injection… Affected: 20.4 through 20.4.2; 20.5; 20.6 |
| CVE-2021-1304 | 6.5 | Jan 20 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify… Affected: All versions, or not specified |
| CVE-2020-3592 | 6.5 | Nov 6 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the… Affected: 20.3.1 |
| CVE-2021-1483 | 6.4 | Nov 15 | A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2021-1482 | 6.4 | Nov 15 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization checking and gain… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2020-3590 | 6.4 | Nov 6 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 20.3.1 |
| CVE-2020-3587 | 6.4 | Nov 6 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 20.3.1 |
| CVE-2020-3579 | 6.1 | Nov 6 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 20.3.1 |
| CVE-2023-20098 | 6.0 | May 9 | A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files Affected: 20.11 |
| CVE-2021-1512 | 6.0 | May 6 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system Affected: 19.2 before 19.2.3; 20.3 before 20.3.1; 20.4 before 20.4.1; 20.5 before 20.5.1 |
| CVE-2025-20157 | 5.9 | May 7 | A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2025-20213 | 5.5 | May 7 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2023-20253 | 5.5 | Sep 27 | A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and allow the… Affected: 20.7; 20.8; 20.9; 20.11 |
| CVE-2021-1546 | 5.5 | Sep 23 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information Affected: 18.4 before 20.4.2; 20.6 before 20.6.1 |
| CVE-2021-34700 | 5.5 | Jul 22 | A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an… Affected: 20.5.0 before 20.5.1 |
| CVE-2026-20210 | 5.4 | May 14 | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability Affected: before 20.9.9.1; 20.10 before 20.12.5.4; 20.12.6 before 20.12.6.2; 20.13 before 20.15.4.4; 20.15.5 before 20.15.5.2; 20.16 before 20.18.2.2; +2 more |
| CVE-2026-20209 | 5.4 | May 14 | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability Affected: before 20.9.9.1; 20.10 before 20.12.5.4; 20.12.6 before 20.12.6.2; 20.13 before 20.15.4.4; 20.15.5 before 20.15.5.2; 20.16 before 20.18.2.2; +2 more |
| CVE-2026-20108 | 5.4 | Mar 25 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 20.12 before 20.12.5.3; 20.13 before 20.15.4.2; 20.16 before 20.18.2.1; 20.12.6 |
| CVE-2025-20147 | 5.4 | May 7 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2021-1466 | 5.4 | Nov 15 | A vulnerability in the vDaemon service of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to cause a buffer overflow on an affected system,… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +32 more |
| CVE-2024-20475 | 5.4 | Sep 25 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a… Affected: 20.6.0.18.3; 20.6.0.18.4; 20.6.1; 20.6.1.0.1; 20.6.1.1; 20.6.1.2; +34 more |
| CVE-2021-1234 | 5.3 | Nov 18 | A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2022-20830 | 5.3 | Oct 10 | Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability Affected: 20.4 before 20.6.1; 20.7 |
| CVE-2021-1486 | 5.3 | May 6 | A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts Affected: 20.4 before 20.4.1 |
| CVE-2021-1464 | 5.0 | Nov 15 | A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization checking and gain restricted access to the… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2021-1470 | 4.9 | Nov 15 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2022-20734 | 4.4 | May 4 | A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, local attacker to view sensitive information on an affected system Affected: 20.6 before 20.6.3; 20.7 before 20.7.2 |
| CVE-2021-1233 | 4.4 | Jan 20 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device Affected: All versions, or not specified |
| CVE-2025-20216 | 4.3 | May 7 | A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2021-1465 | 4.3 | Nov 18 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +33 more |
| CVE-2021-1481 | 4.3 | Nov 15 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct Cypher query language… Affected: 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; +34 more |
| CVE-2020-3591 | 4.3 | Nov 6 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 20.3.1 |
Showing 45