SC
Product
Secure Client
9
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 4Low 0
Watch
Add Secure Client to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20337 | 8.2 | Mar 6 | A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line feed (CRLF) injection… Affected: 4.10.04065 before 4.10.08025; 5.0.00529 before 5.1.2.42 |
| CVE-2025-20206 | 7.8 | Mar 5 | A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack… Affected: before 5.1.8.105 |
| CVE-2023-20178 | 7.8 | Jun 28 | A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a… Affected: before 5.0.02075 |
| CVE-2024-3661 | 7.6 | May 6 | DHCP can add routes to a client’s routing table via the classless static route option (121) Affected: All versions, or not specified |
| CVE-2024-20338 | 7.3 | Mar 6 | A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device Affected: before 5.1.2.42 |
| CVE-2024-20391 | 6.8 | May 15 | A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate… Affected: before 5.1.3.62 |
| CVE-2024-20474 | 6.5 | Oct 23 | A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service… Affected: 4.10.00093; 4.10.01075; 4.10.02086; 4.10.03104; 4.10.04065; 4.10.04071; +23 more |
| CVE-2023-20241 | 5.5 | Nov 22 | Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service… Affected: 4.10.00093; 4.10.01075; 4.10.02086; 4.10.03104; 4.10.04065; 4.10.04071; +15 more |
| CVE-2023-20240 | 5.5 | Nov 22 | Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service… Affected: 4.10.00093; 4.10.01075; 4.10.02086; 4.10.03104; 4.10.04065; 4.10.04071; +15 more |
Showing 9