cisco sd-wan vmanage vulnerabilities and exploits

(subscribe to this query)

5.5

CVSSv3

A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local malicious user to read arbitrary files on the underlying file system of an affected system. This vulnerability exists because access to sensitive information on an affected s...

Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager

8.8

CVSSv3

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local malicious user to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker co...

Cisco Sd-wan Firmware 18.4.1 Cisco Sd-wan Firmware 19.1.0

7.5

CVSSv3

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote malicious user to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch user. These vulnerabili...

Cisco Sd-wan Cisco Sd-wan 20.7 Cisco Sd-wan 20.6

4.4

CVSSv3

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local malicious user to access sensitive information on an affected device. The vulnerability is due to insufficient input validation of requests that are sent to the iperf tool. An attacker could e...

Cisco Sd-wan Firmware Cisco Sd-wan Vbond Orchestrator -Cisco Catalyst Sd-wan Manager -

6.1

CVSSv3

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management i...

Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager 20.3.1

6.4

CVSSv3

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user. The vulnerability exists because the web-based management interface does n...

Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager 20.3.1

6.5

CVSSv3

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for...

Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager 20.7

6.5

CVSSv3

A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to gain access to sensitive information on an affected system. This vulnerability is due to insufficient API authorization checking on the underlying operating ...

Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager 20.7

6

CVSSv3

A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local malicious user to delete arbitrary files. This vulnerability is due to improper filtering of directory traversal character sequences within system commands. An attacker with administrat...

Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager 20.11

5.3

CVSSv3

A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote malicious user to view sensitive information on an affected system. To be affected by this vulnerability, the Cisco SD-WAN vManage Software must be in clust...

Cisco Sd-wan Vmanage

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook