Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

cisco cx cloud agent vulnerabilities and exploits

(subscribe to this query)
6.7
CVSSv3

CVE-2023-20043

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local malicious user to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit co...
Cisco Cx Cloud AgentCisco Cx Cloud Agent 2.2
7.3
CVSSv3

CVE-2023-20044

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local malicious user to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the ...
Cisco Cx Cloud Agent
9.8
CVSSv3

CVE-2022-22965

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Communications Cloud Native Core Automated Test Suite 1.9.0Oracle Communications Cloud Native Core Automated Test Suite 22.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Console 22.1.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 22.1.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0
NA

CVE-2015-6420

Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Se...
Apache Commons CollectionsApache Commons Collections 4.0
7.8
CVSSv3

CVE-2021-3156

Sudo prior to 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
Sudo Project SudoSudo Project Sudo 1.9.5Fedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Netapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp Hci Management Node -Netapp Oncommand Unified Manager Core Package -Netapp Ontap Select Deploy Administration Utility -Netapp Ontap Tools 9
10
CVSSv3

CVE-2021-44228

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4jApache Log4j 2.0Siemens Sppa-t3000 Ses3000 FirmwareSiemens CaptialSiemens Captial 2019.1Siemens ComosSiemens Desigo Cc Advanced Reports 4.0Siemens Desigo Cc Advanced Reports 4.1Siemens Desigo Cc Advanced Reports 4.2Siemens Desigo Cc Advanced Reports 5.0Siemens Desigo Cc Advanced Reports 5.1Siemens Desigo Cc Info Center 5.0
NA

CVE-2014-3569

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected ...
Openssl Openssl 1.0.1j
5.9
CVSSv3

CVE-2021-45105

Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...
Apache Log4jNetapp Cloud Manager -Debian Debian Linux 10.0Debian Debian Linux 11.0Sonicwall Email SecuritySonicwall Network Security ManagerSonicwall Web Application FirewallSonicwall 6bk1602-0aa12-0tp0 FirmwareSonicwall 6bk1602-0aa22-0tp0 FirmwareSonicwall 6bk1602-0aa32-0tp0 FirmwareSonicwall 6bk1602-0aa42-0tp0 FirmwareSonicwall 6bk1602-0aa52-0tp0 Firmware
NA

CVE-2015-1788

The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL prior to 0.9.8s, 1.0.0 prior to 1.0.0e, 1.0.1 prior to 1.0.1n, and 1.0.2 prior to 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows re...
Openssl OpensslOpenssl Openssl 1.0.0Openssl Openssl 1.0.0aOpenssl Openssl 1.0.0bOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0j
NA

CVE-2015-1794

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 prior to 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.
Openssl Openssl 1.0.2Openssl Openssl 1.0.2aOpenssl Openssl 1.0.2bOpenssl Openssl 1.0.2cOpenssl Openssl 1.0.2d
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
localIMAPCVE-2024-8504CVE-2024-42327CVE-2024-11904CVE-2024-47107CVE-2024-53143XML injectionCVE-2024-54750
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook