Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sd-wan vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2023-20261
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote malicious user to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could ex...
Cisco Catalyst Sd-wan Manager 20.6.3.3Cisco Catalyst Sd-wan Manager 17.2.6Cisco Catalyst Sd-wan Manager 17.2.7Cisco Catalyst Sd-wan Manager 17.2.5Cisco Catalyst Sd-wan Manager 18.3.1.1Cisco Catalyst Sd-wan Manager 18.3.3.1Cisco Catalyst Sd-wan Manager 18.3.3Cisco Catalyst Sd-wan Manager 18.3.1Cisco Catalyst Sd-wan Manager 18.3.0Cisco Catalyst Sd-wan Manager 18.4.0.1Cisco Catalyst Sd-wan Manager 18.4.3Cisco Catalyst Sd-wan Manager 18.4.0Cisco Catalyst Sd-wan Manager 18.4.1Cisco Catalyst Sd-wan Manager 19.2.0Cisco Catalyst Sd-wan Manager 19.2.097Cisco Catalyst Sd-wan Manager 19.2.31Cisco Catalyst Sd-wan Manager 19.2.929Cisco Catalyst Sd-wan Manager 20.1.1.1Cisco Catalyst Sd-wan Manager 20.1.12Cisco Catalyst Sd-wan Manager 20.3.1Cisco Catalyst Sd-wan Manager 20.6.1Cisco Catalyst Sd-wan Manager 17.2.8
8.1
CVSSv3
CVE-2020-26064
A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries...
Cisco Catalyst Sd-wan Manager 17.2.6Cisco Catalyst Sd-wan Manager 17.2.7Cisco Catalyst Sd-wan Manager 17.2.5Cisco Catalyst Sd-wan Manager 18.3.1.1Cisco Catalyst Sd-wan Manager 18.3.3.1Cisco Catalyst Sd-wan Manager 18.3.3Cisco Catalyst Sd-wan Manager 18.3.1Cisco Catalyst Sd-wan Manager 18.3.0Cisco Catalyst Sd-wan Manager 18.4.0.1Cisco Catalyst Sd-wan Manager 18.4.3Cisco Catalyst Sd-wan Manager 18.4.0Cisco Catalyst Sd-wan Manager 18.4.1Cisco Catalyst Sd-wan Manager 19.2.0Cisco Catalyst Sd-wan Manager 19.2.097Cisco Catalyst Sd-wan Manager 19.2.31Cisco Catalyst Sd-wan Manager 19.2.929Cisco Catalyst Sd-wan Manager 20.1.1.1Cisco Catalyst Sd-wan Manager 20.1.12Cisco Catalyst Sd-wan Manager 20.3.1Cisco Catalyst Sd-wan Manager 17.2.8Cisco Catalyst Sd-wan Manager 17.2.9Cisco Catalyst Sd-wan Manager 17.2.10
6.5
CVSSv3
CVE-2020-26065
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to conduct path traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient v...
Cisco Catalyst Sd-wan Manager 17.2.6Cisco Catalyst Sd-wan Manager 17.2.7Cisco Catalyst Sd-wan Manager 17.2.5Cisco Catalyst Sd-wan Manager 18.3.1.1Cisco Catalyst Sd-wan Manager 18.3.3.1Cisco Catalyst Sd-wan Manager 18.3.3Cisco Catalyst Sd-wan Manager 18.3.1Cisco Catalyst Sd-wan Manager 18.3.0Cisco Catalyst Sd-wan Manager 18.4.0.1Cisco Catalyst Sd-wan Manager 18.4.3Cisco Catalyst Sd-wan Manager 18.4.0Cisco Catalyst Sd-wan Manager 18.4.1Cisco Catalyst Sd-wan Manager 19.2.0Cisco Catalyst Sd-wan Manager 19.2.097Cisco Catalyst Sd-wan Manager 19.2.31Cisco Catalyst Sd-wan Manager 19.2.929Cisco Catalyst Sd-wan Manager 20.1.1.1Cisco Catalyst Sd-wan Manager 20.1.12Cisco Catalyst Sd-wan Manager 20.3.1Cisco Catalyst Sd-wan Manager 17.2.8Cisco Catalyst Sd-wan Manager 17.2.9Cisco Catalyst Sd-wan Manager 17.2.10
7.8
CVSSv3
CVE-2022-20716
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local malicious user to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modi...
Cisco Sd-wan Vbond Orchestrator -Cisco Sd-wan Vedge Router -Cisco Sd-wan Solution -Cisco Sd-wan Vedge Cloud -Cisco Sd-wan Vsmart Controller Software -Cisco Catalyst Sd-wan Manager -Cisco Sd-wan
7.8
CVSSv3
CVE-2022-20775
Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local malicious user to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabi...
Cisco Sd-wan Vbond OrchestratorCisco Sd-wan Vbond Orchestrator 20.8Cisco Sd-wan Vsmart Controller 20.8Cisco Sd-wan Vsmart ControllerCisco Catalyst Sd-wan Manager 20.8Cisco Catalyst Sd-wan ManagerCisco Sd-wanCisco Sd-wan 20.8
5.9
CVSSv3
CVE-2019-11550
Citrix SD-WAN 10.2.x prior to 10.2.1 and NetScaler SD-WAN 10.0.x prior to 10.0.7 have Improper Certificate Validation.
Citrix Sd-wanCitrix Netscaler Sd-wan
9.8
CVSSv3
CVE-2019-12989
Citrix SD-WAN 10.2.x prior to 10.2.3 and NetScaler SD-WAN 10.0.x prior to 10.0.8 allow SQL Injection.
Citrix Netscaler Sd-wanCitrix Sd-wan
8.8
CVSSv3
CVE-2019-12991
Citrix SD-WAN 10.2.x prior to 10.2.3 and NetScaler SD-WAN 10.0.x prior to 10.0.8 have Improper Input Validation (issue 5 of 6).
Citrix Netscaler Sd-wanCitrix Sd-wan
9.8
CVSSv3
CVE-2019-12985
Citrix SD-WAN 10.2.x prior to 10.2.3 and NetScaler SD-WAN 10.0.x prior to 10.0.8 have Improper Input Validation (issue 1 of 6).
Citrix Netscaler Sd-wanCitrix Sd-wan
9.8
CVSSv3
CVE-2019-12986
Citrix SD-WAN 10.2.x prior to 10.2.3 and NetScaler SD-WAN 10.0.x prior to 10.0.8 have Improper Input Validation (issue 2 of 6).
Citrix Sd-wanCitrix Netscaler Sd-wan
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook