CVE-2023-20262
Published Sep 27, 2023A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH…
Vendor/product archive
cisco / sd-wan_vmanage CVEs
Beta · best-effort41 CVEs tagged to cisco / sd-wan_vmanage — 7 Critical, 9 High, 25 Medium, 0 Low, 0 Unrated.
CVE-2023-20253
Published Sep 27, 2023A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and allow the…
CVE-2023-20179
Published Sep 27, 2023A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to inject HTML…
CVE-2023-20214
Published Aug 3, 2023A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2023-20098
Published May 9, 2023A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vulnerability is due to improper filteri…
CVE-2022-20830
Published Oct 10, 2022A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker…
CVE-2022-20930
Published Sep 30, 2022A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system. This vulnerability…
CVE-2022-20850
Published Sep 30, 2022A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the fi…
CVE-2022-20818
Published Sep 30, 2022Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper ac…
CVE-2022-20696
Published Sep 8, 2022A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical netwo…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2022-20747
Published Apr 15, 2022A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected system. Th…
CVE-2022-20739
Published Apr 15, 2022A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the ro…
CVE-2022-20735
Published Apr 15, 2022A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSR…
CVE-2021-34712
Published Sep 23, 2021A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct cypher query language injection att…
CVE-2021-1546
Published Sep 23, 2021A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to improper protections…
CVE-2021-34700
Published Jul 22, 2021A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an affe…
CVE-2021-1535
Published May 6, 2021A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected s…
CVE-2021-1515
Published May 6, 2021A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper a…
CVE-2021-1514
Published May 6, 2021A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the u…
CVE-2021-1512
Published May 6, 2021A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system.…
CVE-2021-1508
Published May 6, 2021Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or all…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2021-1507
Published May 6, 2021A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the…
CVE-2021-1506
Published May 6, 2021Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or all…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2021-1505
Published May 6, 2021Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or all…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2021-1486
Published May 6, 2021A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the improper handling of…
Showing 1-25 of 41 CVEsPage 1 of 2