SV
Product
Sd-wan Vmanage
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 13Medium 24Low 0
Watch
Add Sd-wan Vmanage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-20930 | 6.7 | Sep 30 | Cisco SD-WAN Software Arbitrary File Corruption Vulnerability Affected: before 20.6.2 |
| CVE-2020-27129 | 6.7 | Nov 6 | A vulnerability in the remote management feature of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands and potentially gain… Affected: before 20.3.1 |
| CVE-2022-20747 | 6.5 | Apr 15 | A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected system Affected: before 20.6.1 |
| CVE-2022-20735 | 6.5 | Apr 15 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: before 20.6.1 |
| CVE-2021-34712 | 6.5 | Sep 23 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct cypher query language injection… Affected: 20.3 before 20.3.4 |
| CVE-2021-1349 | 6.5 | Jan 20 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct Cypher query language injection… Affected: before 20.3.2 |
| CVE-2021-1259 | 6.5 | Jan 20 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain… Affected: before 18.2.0 |
| CVE-2020-3592 | 6.5 | Nov 6 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the… Affected: through 20.1.12 |
| CVE-2020-3590 | 6.4 | Nov 6 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 20.1.12 |
| CVE-2020-3587 | 6.4 | Nov 6 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 20.1.12 |
| CVE-2020-3579 | 6.1 | Nov 6 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 20.1.12 |
| CVE-2023-20098 | 6.0 | May 9 | A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files Affected: before 20.9.1 |
| CVE-2021-1512 | 6.0 | May 6 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system Affected: before 18.4.6; 20.1 before 20.1.2 |
| CVE-2023-20253 | 5.5 | Sep 27 | A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and allow the… Affected: before 20.6.2; 20.10 |
| CVE-2021-1546 | 5.5 | Sep 23 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information Affected: 20.5 before 20.5.2 |
| CVE-2021-34700 | 5.5 | Jul 22 | A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an… Affected: before 20.4.2 |
| CVE-2021-1235 | 5.5 | Jan 20 | A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensitive database files on an affected system Affected: before 19.2.3 |
| CVE-2023-20179 | 5.4 | Sep 27 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to inject HTML… Affected: before 20.6.6; 20.7 before 20.10 |
| CVE-2021-1507 | 5.4 | May 6 | A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the… Affected: before 20.5.1 |
| CVE-2022-20830 | 5.3 | Oct 10 | Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability Affected: 18.4 before 20.3.4.1 |
| CVE-2021-1535 | 5.3 | May 6 | A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected… Affected: before 20.5.1 |
| CVE-2021-1486 | 5.3 | May 6 | A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts Affected: before 20.3.3 |
| CVE-2021-1515 | 4.3 | May 6 | A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information Affected: before 20.4.1 |
| CVE-2020-3591 | 4.3 | Nov 6 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 20.1.12 |
Showing 24