Sd-wan Vmanage (Cisco) - vulnerabilities (CVEs)

42 CVEs, 0 in the last 30 days, 69 known versions, newest CVE from 2023-09-27. Vendor: Cisco.

CVEs of Sd-wan Vmanage

CVE-2023-20253 - CVSS 7.1 (high), 2023-09-27: A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass…
CVE-2023-20262 - CVSS 7.5 (high), 2023-09-27: A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a…
CVE-2023-20179 - CVSS 5.4 (medium), 2023-09-27: A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote…
CVE-2023-20214 - CVSS 9.1 (critical), 2023-08-03: A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to…
CVE-2023-20098 - CVSS 6 (medium), 2023-05-09: A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vulnerability is due…
CVE-2022-20830 - CVSS 5.3 (medium), 2022-10-10: A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an…
CVE-2022-20930 - CVSS 6.7 (medium), 2022-09-30: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected…
CVE-2022-20850 - CVSS 7.1 (high), 2022-09-30: A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete…
CVE-2022-20818 - CVSS 7.8 (high), 2022-09-30: Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities…
CVE-2022-20696 - CVSS 8.8 (high), 2022-09-08: A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to…
CVE-2022-20747 - CVSS 6.5 (medium), 2022-04-15: A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on…
CVE-2022-20739 - CVSS 7.3 (high), 2022-04-15: A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying…
CVE-2022-20735 - CVSS 6.5 (medium), 2022-04-15: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
CVE-2021-34712 - CVSS 6.5 (medium), 2021-09-23: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct cypher query…
CVE-2021-1546 - CVSS 5.5 (medium), 2021-09-23: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to…
CVE-2021-34700 - CVSS 5.5 (medium), 2021-07-22: A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying…
CVE-2021-1535 - CVSS 5.3 (medium), 2021-05-06: A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive…
CVE-2021-1468 - CVSS 9.8 (critical), 2021-05-06: Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to…
CVE-2021-1506 - CVSS 9.8 (critical), 2021-05-06: Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to…
CVE-2021-1512 - CVSS 6 (medium), 2021-05-06: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of…
CVE-2021-1505 - CVSS 9.8 (critical), 2021-05-06: Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to…
CVE-2021-1508 - CVSS 9.8 (critical), 2021-05-06: Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to…
CVE-2021-1515 - CVSS 4.3 (medium), 2021-05-06: A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability…
CVE-2021-1486 - CVSS 5.3 (medium), 2021-05-06: A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the…
CVE-2021-1507 - CVSS 6.4 (medium), 2021-05-06: A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack…
CVE-2021-1514 - CVSS 7.8 (high), 2021-05-06: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with…
CVE-2021-1284 - CVSS 8.8 (high), 2021-05-06: A vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to bypass…
CVE-2021-1275 - CVSS 9.8 (critical), 2021-05-06: Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to…
CVE-2021-1480 - CVSS 7.8 (high), 2021-04-08: Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated,…
CVE-2021-1479 - CVSS 9.8 (critical), 2021-04-08: Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated,…
CVE-2021-1137 - CVSS 7.8 (high), 2021-04-08: Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated,…
CVE-2021-1235 - CVSS 5.5 (medium), 2021-01-20: A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensitive database files on an affected…
CVE-2021-1225 - CVSS 9.1 (critical), 2021-01-20: Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL…
CVE-2021-1349 - CVSS 6.5 (medium), 2021-01-20: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct Cypher query…
CVE-2021-1259 - CVSS 6.5 (medium), 2021-01-20: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal…
CVE-2020-3587 - CVSS 6.4 (medium), 2020-11-06: A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a…
CVE-2020-3592 - CVSS 6.5 (medium), 2020-11-06: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization…
CVE-2020-3591 - CVSS 4.3 (medium), 2020-11-06: A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a…
CVE-2020-3590 - CVSS 6.4 (medium), 2020-11-06: A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a…
CVE-2020-3579 - CVSS 6.1 (medium), 2020-11-06: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2020-27129 - CVSS 6.7 (medium), 2020-11-06: A vulnerability in the remote management feature of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands…