cisco catalyst sd-wan manager - vulnerabilities and exploits

(subscribe to this query)

NA

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote malicious user to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could ex...

NA

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries...

NA

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to conduct path traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient v...

NA

A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local malicious user to bypass authorization and allow the malicious user to roll back the configuration on vManage controllers and edge router device. T...

Cisco Sd-wan Vmanage Cisco Sd-wan Vmanage 20.10 Cisco Catalyst Sd-wan Manager 20.9 Cisco Catalyst Sd-wan Manager 20.11 Cisco Catalyst Sd-wan Manager 20.8 Cisco Catalyst Sd-wan Manager 20.7

NA

A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote malicious user to gain unauthorized access to the application as an arbitrary user. This vulnerability is due to improper authent...

Cisco Catalyst Sd-wan Manager 20.9.3.2 Cisco Catalyst Sd-wan Manager 20.11.1.2

NA

A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote malicious user to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and we...

Cisco Sd-wan Vmanage 20.12 Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager

NA

A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote malicious user to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vManage instance...

Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager 20.6.3.3 Cisco Catalyst Sd-wan Manager

1 Article

4

CVSSv2

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to conduct cypher query language injection attacks on an affected system. This vulnerability is due to insufficient input validation by the w...

Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager 20.6 Cisco Catalyst Sd-wan Manager Cisco Catalyst Sd-wan Manager 20.5

NA

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote malicious user to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch user. These vulnerabili...

Cisco Sd-wan Cisco Sd-wan 20.7 Cisco Sd-wan 20.6

NA

A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote malicious user to access another tenant that is being managed by the same Cisco Catalyst SD-WAN Manager instance. This vulnerability req...

Cisco Sd-wan Manager

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook