SV
Product
Sd-wan Vmanage
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 13Medium 24Low 0
Watch
Add Sd-wan Vmanage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1468 | 9.8 | May 6 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or… Affected: before 20.3.3 |
| CVE-2021-1479 | 9.8 | Apr 8 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to… Affected: before 19.2.4; 19.3 before 20.3.3 |
| CVE-2023-20214 | 9.1 | Aug 3 | A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions… Affected: 20.10 before 20.10.1.2 |
| CVE-2021-1225 | 9.1 | Jan 20 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on… Affected: before 19.2.3 |
| CVE-2022-20696 | 8.8 | Sep 8 | A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical… Affected: before 20.6.4 |
| CVE-2021-1508 | 8.8 | May 6 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or… Affected: before 19.2.99; 20.3 before 20.3.3 |
| CVE-2021-1505 | 8.8 | May 6 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or… Affected: before 20.3.3 |
| CVE-2021-1284 | 8.8 | May 6 | A vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to bypass authentication and… Affected: before 20.3.1 |
| CVE-2022-20818 | 7.8 | Sep 30 | Cisco SD-WAN Software Privilege Escalation Vulnerabilities Affected: before 20.9 |
| CVE-2021-1514 | 7.8 | May 6 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the… Affected: before 18.3 |
| CVE-2021-1480 | 7.8 | Apr 8 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to… Affected: before 19.2.4; 19.3 before 20.3.3 |
| CVE-2021-1137 | 7.8 | Apr 8 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to… Affected: before 19.2.4; 19.3 before 20.3.3 |
| CVE-2023-20262 | 7.5 | Sep 27 | A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH… Affected: before 20.3.7; 20.10 before 20.11.1; 20.12 |
| CVE-2021-1275 | 7.5 | May 6 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or… Affected: before 20.3.3 |
| CVE-2022-20739 | 7.3 | Apr 15 | A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the… Affected: before 20.6.1 |
| CVE-2021-1506 | 7.2 | May 6 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or… Affected: before 20.3.3 |
| CVE-2022-20850 | 7.1 | Sep 30 | Cisco SD-WAN Arbitrary File Deletion Vulnerability Affected: before 18.4.5 |
| CVE-2022-20930 | 6.7 | Sep 30 | Cisco SD-WAN Software Arbitrary File Corruption Vulnerability Affected: before 20.6.2 |
| CVE-2020-27129 | 6.7 | Nov 6 | A vulnerability in the remote management feature of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands and potentially gain… Affected: before 20.3.1 |
| CVE-2022-20747 | 6.5 | Apr 15 | A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected system Affected: before 20.6.1 |
| CVE-2022-20735 | 6.5 | Apr 15 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: before 20.6.1 |
| CVE-2021-34712 | 6.5 | Sep 23 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct cypher query language injection… Affected: 20.3 before 20.3.4 |
| CVE-2021-1349 | 6.5 | Jan 20 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct Cypher query language injection… Affected: before 20.3.2 |
| CVE-2021-1259 | 6.5 | Jan 20 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain… Affected: before 18.2.0 |
| CVE-2020-3592 | 6.5 | Nov 6 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the… Affected: through 20.1.12 |
| CVE-2020-3590 | 6.4 | Nov 6 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 20.1.12 |
| CVE-2020-3587 | 6.4 | Nov 6 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 20.1.12 |
| CVE-2020-3579 | 6.1 | Nov 6 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 20.1.12 |
| CVE-2023-20098 | 6.0 | May 9 | A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files Affected: before 20.9.1 |
| CVE-2021-1512 | 6.0 | May 6 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system Affected: before 18.4.6; 20.1 before 20.1.2 |
| CVE-2023-20253 | 5.5 | Sep 27 | A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and allow the… Affected: before 20.6.2; 20.10 |
| CVE-2021-1546 | 5.5 | Sep 23 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information Affected: 20.5 before 20.5.2 |
| CVE-2021-34700 | 5.5 | Jul 22 | A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an… Affected: before 20.4.2 |
| CVE-2021-1235 | 5.5 | Jan 20 | A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensitive database files on an affected system Affected: before 19.2.3 |
| CVE-2023-20179 | 5.4 | Sep 27 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to inject HTML… Affected: before 20.6.6; 20.7 before 20.10 |
| CVE-2021-1507 | 5.4 | May 6 | A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the… Affected: before 20.5.1 |
| CVE-2022-20830 | 5.3 | Oct 10 | Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability Affected: 18.4 before 20.3.4.1 |
| CVE-2021-1535 | 5.3 | May 6 | A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected… Affected: before 20.5.1 |
| CVE-2021-1486 | 5.3 | May 6 | A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts Affected: before 20.3.3 |
| CVE-2021-1515 | 4.3 | May 6 | A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information Affected: before 20.4.1 |
| CVE-2020-3591 | 4.3 | Nov 6 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 20.1.12 |
Showing 41