Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco security manager 3.0.2 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2014-2138
CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and previous versions allows remote malicious users to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCun82349.
Cisco Security Manager 3.1.1Cisco Security Manager 3.1Cisco Security Manager 3.0.2Cisco Security Manager 3.3.1Cisco Security Manager 3.3Cisco Security Manager 3.2.1Cisco Security Manager 3.2Cisco Security Manager 4.1Cisco Security Manager 4.0.1Cisco Security Manager 4.0Cisco Security Manager 3.2.2Cisco Security Manager
10
CVSSv2
CVE-2010-3036
Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services prior to 4.0 allow remote malicious users to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.
Cisco Ciscoworks Common Services 3.2Cisco Ciscoworks Common Services 3.3Cisco Ciscoworks Common Services 3.0.5Cisco Ciscoworks Common Services 3.0.6Cisco Ciscoworks Common Services 3.1Cisco Ciscoworks Common Services 3.1.1Cisco Unified Operations Manager 2.0.2Cisco Unified Operations Manager 2.0.3Cisco Ciscoworks Lan Management Solution 3.0Cisco Ciscoworks Lan Management Solution 3.1Cisco Unified Service Monitor 2.0.1Cisco Qos Policy Manager 4.0Cisco Ciscoworks Lan Management Solution 3.2Cisco Security Manager 3.0.2Cisco Security Manager 3.2Cisco Qos Policy Manager 4.0.1Cisco Qos Policy Manager 4.0.2Cisco Telepresence Readiness Assessment Manager 1.0Cisco Unified Operations Manager 2.0.1Cisco Ciscoworks Lan Management Solution 2.6
10
CVSSv2
CVE-2019-15958
A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote malicious user to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is du...
Cisco Prime InfrastructureCisco Prime Infrastructure 3.6Cisco Evolved Programmable Network Manager
5.8
CVSSv2
CVE-2021-3450
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve paramet...
Openssl OpensslFreebsd Freebsd 12.2Netapp Santricity Smi-s Provider Firmware -Netapp Storagegrid Firmware -Windriver Linux -Windriver Linux 18.0Windriver Linux 19.0Windriver Linux 17.0Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Ontap Select Deploy Administration Utility -Netapp Cloud Volumes Ontap Mediator -Fedoraproject Fedora 34Tenable Nessus AgentTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Oracle Jd Edwards World Security A9.4Oracle Weblogic Server 12.2.1.4.0
4.3
CVSSv2
CVE-2021-3449
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Freebsd Freebsd 12.2Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Tenable Tenable.scTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Tenable Log Correlation EngineFedoraproject Fedora 34
NA
CVE-2022-20943
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote malicious user to bypass the configured policies or cause a denial of service (DoS) condition on an affe...
Cisco Firepower Threat Defense 7.0.0Cisco Firepower Threat Defense 7.0.1Cisco Firepower Threat Defense 7.0.0.1Cisco Firepower Threat Defense 7.0.1.1Cisco Cyber Vision 4.0.2Cisco Cyber Vision 3.0.0Cisco Cyber Vision 3.0.1Cisco Cyber Vision 3.0.2Cisco Cyber Vision 3.0.3Cisco Cyber Vision 3.0.5Cisco Cyber Vision 3.0.6Cisco Cyber Vision 3.1.0Cisco Cyber Vision 3.1.2Cisco Cyber Vision 3.1.1Cisco Cyber Vision 3.2.3Cisco Cyber Vision 3.2.1Cisco Cyber Vision 3.2.4Cisco Cyber Vision 3.2.0Cisco Cyber Vision 3.2.2Cisco Cyber Vision 4.0.0Cisco Cyber Vision 4.0.1Cisco Cyber Vision 4.0.3
NA
CVE-2022-20922
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote malicious user to bypass the configured policies or cause a denial of service (DoS) condition on an affe...
Cisco Firepower Threat Defense 7.1.0Cisco Firepower Threat Defense 7.2.0.1Cisco Firepower Threat Defense 7.1.0.1Cisco Firepower Threat Defense 7.1.0.2Cisco Firepower Threat Defense 7.2.0Cisco Umbrella Insights Virtual Appliance 1.5.5Cisco Umbrella Insights Virtual Appliance 1.5.6Cisco Umbrella Insights Virtual Appliance 2.0.0Cisco Umbrella Insights Virtual Appliance 2.0.2Cisco Umbrella Insights Virtual Appliance 2.0.3Cisco Umbrella Insights Virtual Appliance 2.1.0Cisco Umbrella Insights Virtual Appliance 2.1.2Cisco Umbrella Insights Virtual Appliance 2.1.5Cisco Umbrella Insights Virtual Appliance 2.1.4Cisco Umbrella Insights Virtual Appliance 2.4.12Cisco Umbrella Insights Virtual Appliance 2.4.6Cisco Umbrella Insights Virtual Appliance 2.4Cisco Umbrella Insights Virtual Appliance 2.4.4Cisco Umbrella Insights Virtual Appliance 2.5Cisco Umbrella Insights Virtual Appliance 2.5.4Cisco Umbrella Insights Virtual Appliance 2.5.5Cisco Umbrella Insights Virtual Appliance 2.5.6
7.5
CVSSv2
CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Sd-wan Edge 9.1Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Oracle Product Lifecycle Analytics 3.6.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 22.1.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook