SD
Product
Secure Desktop
13
CVEs
0
On KEV
5.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Secure Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-5393 | 5.5 | Oct 18 | Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory… Affected: All versions, or not specified |
| CVE-2015-0691 | – | Apr 17 | A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID… Affected: 3.0_base; 3.1.0.31; 3.1.1; 3.1.1.45; 3.1_base; 3.2.0.136; +31 more |
| CVE-2012-4655 | – | Sep 24 | The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to… Affected: 3.1; 3.1.1; 3.1.1.27; 3.1.1.33; 3.1.1.45; 3.2; +19 more |
| CVE-2012-2495 | – | Jun 20 | The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of… Affected: through 3.5.2008; 3.1; 3.1.1; 3.1.1.27; 3.1.1.33; 3.1.1.45; +11 more |
| CVE-2011-0925 | – | Feb 28 | The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to download an unintended Cisco program onto a client machine,… Affected: All versions, or not specified |
| CVE-2011-0926 | – | Feb 25 | A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote… Affected: All versions, or not specified |
| CVE-2009-5008 | – | Oct 14 | Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy… Affected: All versions, or not specified |
| CVE-2010-0589 | – | Apr 15 | The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote… Affected: through 3.5; 3.1; 3.1.1; 3.1.1.27; 3.1.1.33; 3.2; +6 more |
| CVE-2010-0440 | – | Feb 3 | Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1),… Affected: before 3.5 |
| CVE-2006-5806 | – | Nov 8 | SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a… Affected: through 3.1.1.33 |
| CVE-2006-5807 | – | Nov 8 | Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka… Affected: through 3.1.1.33 |
| CVE-2006-5808 | – | Nov 8 | The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which… Affected: through 3.1.1.33; 3.1.1.27 |
| CVE-2006-5394 | – | Oct 18 | The default configuration of Cisco Secure Desktop (CSD) has an unchecked "Disable printing" box in Secure Desktop Settings, which might allow local users to read data that was… Affected: All versions, or not specified |
Showing 13