Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco vmanage network management - vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2018-0349
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the request admin-tech command in the C...
Cisco Vmanage Network Management -Cisco Vbond Orchestrator -Cisco Vedge-plus -Cisco Vedge-pro -Cisco Vsmart Controller -Cisco Vedge-100 FirmwareCisco Vedge 100b FirmwareCisco Vedge 100m FirmwareCisco Vedge 100wm FirmwareCisco Vedge-1000 FirmwareCisco Vedge-2000 FirmwareCisco Vedge-5000 Firmware
9.3
CVSSv2
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
9
CVSSv2
CVE-2019-1624
A vulnerability in the vManage web-based UI (Web UI) in the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could ...
Cisco Sd-wan
9
CVSSv2
CVE-2019-1650
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the save command in the CLI of the affe...
Cisco Vedge 100 FirmwareCisco Vedge 1000 FirmwareCisco Vedge 2000 FirmwareCisco Vedge 5000 FirmwareCisco Sd-wanCisco Vmanage Network Management -Cisco Vbond Orchestrator -Cisco Vsmart Controller -
9
CVSSv2
CVE-2018-0432
A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the err...
Cisco Vedge 100 FirmwareCisco Vedge 1000 FirmwareCisco Vedge 2000 FirmwareCisco Vedge 5000 FirmwareCisco Vmanage Network Management System -
9
CVSSv2
CVE-2018-0345
A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to execute arbitrary commands with the privileges of the vmanage user in the configuration management system of the affected software. The...
Cisco Vmanage Network Management -Cisco Vsmart Controller -Cisco Vbond Orchestrator -Cisco Vedge-plus -Cisco Vedge-pro -Cisco Vedge-100 FirmwareCisco Vedge 100b FirmwareCisco Vedge 100m FirmwareCisco Vedge 100wm FirmwareCisco Vedge-1000 FirmwareCisco Vedge-2000 FirmwareCisco Vedge-5000 Firmware
9
CVSSv2
CVE-2018-0348
A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...
Cisco Vbond Orchestrator -Cisco Vedge-plus -Cisco Vedge-pro -Cisco Vmanage Network Management -Cisco Vsmart Controller -Cisco Vedge-100 FirmwareCisco Vedge 100b FirmwareCisco Vedge 100m FirmwareCisco Vedge 100wm FirmwareCisco Vedge-1000 FirmwareCisco Vedge-2000 FirmwareCisco Vedge-5000 Firmware
9
CVSSv2
CVE-2018-0350
A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could ex...
Cisco Vedge-pro -Cisco Vmanage Network Management -Cisco Vbond Orchestrator -Cisco Vsmart Controller -Cisco Vedge-plus -Cisco Vedge-100 FirmwareCisco Vedge 100b FirmwareCisco Vedge 100m FirmwareCisco Vedge 100wm FirmwareCisco Vedge-1000 FirmwareCisco Vedge-2000 FirmwareCisco Vedge-5000 Firmware
8.5
CVSSv2
CVE-2021-44832
Apache Log4j2 versions 2.0-beta7 up to and including 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the tar...
Apache Log4j 2.0Apache Log4jOracle Weblogic Server 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Weblogic Server 12.2.1.4.0Oracle Primavera Unifier 19.12Oracle Weblogic Server 14.1.1.0.0Oracle Primavera Unifier 20.12Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Primavera GatewayOracle Retail Assortment Planning 16.0.3Oracle Primavera Unifier 21.12Oracle Primavera P6 Enterprise Project Portfolio Management 21.12.0.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera Gateway 21.12.0Oracle Retail Fiscal Management 14.2Oracle Siebel Ui Framework 21.12Oracle Communications Diameter Signaling RouterCisco Cloudcenter 4.10.0.16Fedoraproject Fedora 34Fedoraproject Fedora 35
7.8
CVSSv2
CVE-2018-0346
A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in ...
Cisco Vmanage Network Management -Cisco Vsmart Controller -Cisco Vbond Orchestrator -Cisco Vedge-plus -Cisco Vedge-pro -Cisco Vedge-100 FirmwareCisco Vedge 100b FirmwareCisco Vedge 100m FirmwareCisco Vedge 100wm FirmwareCisco Vedge-1000 FirmwareCisco Vedge-2000 FirmwareCisco Vedge-5000 Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook