Connected Mobile Experiences (Cisco) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2023-10-10. Vendor: Cisco.

CVEs of Connected Mobile Experiences

• CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
• CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
• CVE-2021-1522 - CVSS 4.3 (medium), 2021-08-04: A vulnerability in the change password API of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, remote attacker to alter their own…
• CVE-2021-1143 - CVSS 4.3 (medium), 2021-01-13: A vulnerability in Cisco Connected Mobile Experiences (CMX) API authorizations could allow an authenticated, remote attacker to enumerate what users exist on…
• CVE-2021-1144 - CVSS 8.8 (high), 2021-01-13: A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the…
• CVE-2020-3152 - CVSS 6.7 (medium), 2020-08-26: A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administrative credentials to execute arbitrary…
• CVE-2020-3151 - CVSS 6.7 (medium), 2020-08-26: A vulnerability in the CLI of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administrative credentials to bypass…
• CVE-2019-1645 - CVSS 4.3 (medium), 2019-01-24: A vulnerability in the Cisco Connected Mobile Experiences (CMX) software could allow an unauthenticated, adjacent attacker to access sensitive data on an…