Cisco Cisco SD-WAN vManage
61 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-20261 | 17.2.6 ; 17.2.7 ; 17.2.8 ; … | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files fro | MEDIUM 6.5 | 0.7 % | ||
| CVE-2023-20179 | 20.3.1 ; 20.3.2 ; 20.3.2.1 ; … | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authen | MEDIUM 5.4 | 0.4 % | ||
| CVE-2023-20252 | 20.9.3.2 ; 20.11.1.2 | A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticat | CRITICAL 9.8 | 1.1 % | ||
| CVE-2023-20262 | 17.2.6 ; 17.2.7 ; 17.2.8 ; … | A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash | HIGH 7.5 | 1.0 % | ||
| CVE-2023-20034 | 17.2.6 ; 17.2.7 ; 17.2.8 ; … | Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to | HIGH 7.5 | 0.8 % | ||
| CVE-2023-20253 | 17.2.6 ; 17.2.7 ; 17.2.8 ; … | A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacke | HIGH 7.1 | 0.2 % | ||
| CVE-2023-20254 | 17.2.6 ; 17.2.7 ; 17.2.8 ; … | A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, rem | HIGH 8.8 | 0.8 % | ||
| CVE-2020-26064 | 17.2.6 ; 17.2.7 ; 17.2.8 ; … | A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access t | HIGH 8.1 | 0.7 % | ||
| CVE-2020-26065 | 17.2.6 ; 17.2.7 ; 17.2.8 ; … | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to cond | MEDIUM 6.5 | 1.7 % | ||
| CVE-2023-20214 | 20.6.4 ; 20.6.5 ; 20.6.5.1 ; … | A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, r | CRITICAL 9.1 | 0.9 % | ||
| CVE-2023-20098 | 20.9.1 ; 20.9.2 | A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This v | MEDIUM 6.0 | 0.5 % | ||
| CVE-2023-20113 | n/a | Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability | HIGH 8.1 | 0.3 % | ||
| CVE-2022-20830 | n/a | Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability | MEDIUM 5.3 | 0.8 % | ||
| CVE-2022-20930 | n/a | Cisco SD-WAN Software Arbitrary File Corruption Vulnerability | MEDIUM 6.7 | 0.3 % | ||
| CVE-2022-20844 | n/a | Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability | MEDIUM 5.3 | 0.9 % | ||
| CVE-2022-20696 | n/a | Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability | HIGH 8.8 | 0.4 % | ||
| CVE-2022-20734 | n/a | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | MEDIUM 4.4 | 0.2 % | ||
| CVE-2022-20735 | n/a | Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability | MEDIUM 6.5 | 0.5 % | ||
| CVE-2022-20739 | n/a | Cisco SD-WAN vManage Software Privilege Escalation Vulnerability | HIGH 7.3 | 0.6 % | ||
| CVE-2022-20747 | n/a | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2021-1589 | n/a | Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2021-34712 | n/a | Cisco SD-WAN vManage Software Cypher Query Language Injection Vulnerability | MEDIUM 6.5 | 0.7 % | ||
| CVE-2021-34700 | n/a | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-1535 | n/a | Cisco SD-WAN vManage Information Disclosure Vulnerability | MEDIUM 5.3 | 1.2 % | ||
| CVE-2021-1515 | n/a | Cisco SD-WAN vManage Information Disclosure Vulnerability | MEDIUM 4.3 | 0.4 % | ||
| CVE-2021-1275 | n/a | Cisco SD-WAN vManage Software Vulnerabilities | CRITICAL 9.8 | 2.1 % | ||
| CVE-2021-1284 | n/a | Cisco SD-WAN vManage Software Authentication Bypass Vulnerability | HIGH 8.8 | 0.4 % | ||
| CVE-2021-1508 | n/a | Cisco SD-WAN vManage Software Vulnerabilities | CRITICAL 9.8 | 1.6 % | ||
| CVE-2021-1507 | n/a | Cisco SD-WAN vManage API Stored Cross-Site Scripting Vulnerability | MEDIUM 6.4 | 0.6 % | ||
| CVE-2021-1506 | n/a | Cisco SD-WAN vManage Software Vulnerabilities | CRITICAL 9.8 | 1.8 % | ||
| CVE-2021-1505 | n/a | Cisco SD-WAN vManage Software Vulnerabilities | CRITICAL 9.8 | 1.6 % | ||
| CVE-2021-1486 | n/a | Cisco SD-WAN vManage HTTP Authentication User Enumeration Vulnerability | MEDIUM 5.3 | 1.2 % | ||
| CVE-2021-1468 | n/a | Cisco SD-WAN vManage Software Vulnerabilities | CRITICAL 9.8 | 2.0 % | ||
| CVE-2021-1225 | n/a | Cisco SD-WAN vManage SQL Injection Vulnerabilities | CRITICAL 9.1 | 1.4 % | ||
| CVE-2021-1235 | n/a | Cisco SD-WAN vManage Information Disclosure Vulnerability | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-1305 | n/a | Cisco SD-WAN vManage Authorization Bypass Vulnerabilities | HIGH 8.8 | 1.3 % | ||
| CVE-2021-1349 | n/a | Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability | MEDIUM 6.5 | 1.4 % | ||
| CVE-2021-1259 | n/a | Cisco SD-WAN vManage Software Path Traversal Vulnerability | MEDIUM 6.5 | 2.0 % | ||
| CVE-2021-1302 | n/a | Cisco SD-WAN vManage Authorization Bypass Vulnerabilities | HIGH 8.8 | 1.8 % | ||
| CVE-2021-1304 | n/a | Cisco SD-WAN vManage Authorization Bypass Vulnerabilities | HIGH 8.8 | 1.6 % | ||
| CVE-2020-3592 | n/a | Cisco SD-WAN vManage Software Authorization Bypass Vulnerability | MEDIUM 6.5 | 0.8 % | ||
| CVE-2020-3591 | n/a | Cisco SD-WAN vManage Cross-Site Scripting Vulnerability | MEDIUM 4.3 | 0.7 % | ||
| CVE-2020-3590 | n/a | Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability | MEDIUM 6.4 | 0.6 % | ||
| CVE-2020-3587 | n/a | Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability | MEDIUM 6.4 | 0.6 % | ||
| CVE-2020-3579 | n/a | Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2020-27129 | n/a | Cisco SD-WAN vManage Software Command Injection Vulnerability | MEDIUM 6.7 | 0.3 % | ||
| CVE-2020-27128 | n/a | Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability | MEDIUM 6.5 | 59 % | ||
| CVE-2020-3536 | n/a | Cisco SD-WAN vManage Cross-Site Scripting Vulnerability | MEDIUM 6.4 | 0.6 % | ||
| CVE-2020-3374 | n/a | Cisco SD-WAN vManage Software Authorization Bypass Vulnerability | CRITICAL 9.9 | 1.9 % | ||
| CVE-2020-3375 | n/a | Cisco SD-WAN Solution Software Buffer Overflow Vulnerability | CRITICAL 9.8 | 3.9 % | ||
| CVE-2020-3468 | n/a | Cisco SD-WAN vManage Software SQL Injection Vulnerability | MEDIUM 5.4 | 1.0 % | ||
| CVE-2020-3437 | n/a | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | MEDIUM 6.5 | 2.9 % | ||
| CVE-2020-3406 | n/a | Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability | MEDIUM 6.4 | 0.8 % | ||
| CVE-2020-3401 | n/a | Cisco SD-WAN vManage Software Path Traversal Vulnerability | MEDIUM 6.5 | 2.6 % | ||
| CVE-2020-3405 | n/a | Cisco SD-WAN vManage Software XML External Entity Vulnerability | HIGH 7.3 | 1.3 % | ||
| CVE-2020-3388 | n/a | Cisco SD-WAN vManage Software Command Injection Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2020-3387 | n/a | Cisco SD-WAN vManage Software Remote Code Execution Vulnerability | HIGH 8.8 | 13 % | ||
| CVE-2020-3381 | n/a | Cisco SD-WAN vManage Software Directory Traversal Vulnerability | HIGH 8.8 | 2.6 % | ||
| CVE-2020-3378 | n/a | Cisco SD-WAN vManage Software SQL Injection Vulnerability | MEDIUM 4.3 | 0.7 % | ||
| CVE-2020-3372 | n/a | Cisco SD-WAN vManage Software Denial of Service Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2020-3180 | n/a | Cisco SD-WAN Solution Software Static Credentials Vulnerability | HIGH 8.4 | 0.3 % |