# Cisco SD-WAN vManage. Every CVE that names Cisco SD-WAN vManage among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Improper access control in Cisco SD-WAN vManage](https://agentprime.io/advisories/CVE-2023-20261.md) `CVE-2023-20261` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2023 · Tags: Broken access control - [Cross-site scripting in Cisco SD-WAN vManage](https://agentprime.io/advisories/CVE-2023-20179.md) `CVE-2023-20179` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 4.3 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Cross-site scripting (XSS) - [Missing authorization in Cisco SD-WAN vManage](https://agentprime.io/advisories/CVE-2023-20252.md) `CVE-2023-20252` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Sept 2023 · Tags: Broken access control - [A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only.](https://agentprime.io/advisories/CVE-2023-20262.md) `CVE-2023-20262` · CVE record: Cisco Cisco SD-WAN Solution and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-399 - [Hard-coded credentials in Cisco SD-WAN vManage](https://agentprime.io/advisories/CVE-2023-20034.md) `CVE-2023-20034` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 7.5 High · Not analysed yet · Published 27 Sept 2023 · Tags: Hard-coded credentials - [Cisco SD-WAN vManage: A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN…](https://agentprime.io/advisories/CVE-2023-20253.md) `CVE-2023-20253` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 7.1 High · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-286 - [A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attacker to access another tenant that is being managed…](https://agentprime.io/advisories/CVE-2023-20254.md) `CVE-2023-20254` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 7.2 High · Not analysed yet · Published 27 Sept 2023 - [XML external entity injection in Cisco SD-WAN vManage](https://agentprime.io/advisories/CVE-2020-26064.md) `CVE-2020-26064` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 4 Aug 2023 · Tags: XML external entities (XXE) - [Path traversal in Cisco SD-WAN vManage](https://agentprime.io/advisories/CVE-2020-26065.md) `CVE-2020-26065` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 4 Aug 2023 · Tags: Path traversal - [Improper authentication in Cisco SD-WAN vManage](https://agentprime.io/advisories/CVE-2023-20214.md) `CVE-2023-20214` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2023 · Tags: Authentication bypass - [Path traversal in Cisco SD-WAN vManage](https://agentprime.io/advisories/CVE-2023-20098.md) `CVE-2023-20098` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 4.4 Medium · Not analysed yet · Published 9 May 2023 · Tags: Path traversal - [Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2023-20113.md) `CVE-2023-20113` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 23 Mar 2023 · Tags: Cross-site request forgery (CSRF) - [Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-20830.md) `CVE-2022-20830` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2022 · Tags: Authentication bypass - [Cisco SD-WAN Software Arbitrary File Corruption Vulnerability](https://agentprime.io/advisories/CVE-2022-20930.md) `CVE-2022-20930` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.7 Medium · Not analysed yet · Published 30 Sept 2022 · Tags: Command injection - [Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability](https://agentprime.io/advisories/CVE-2022-20844.md) `CVE-2022-20844` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2022 · Tags: Hard-coded credentials - [Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability](https://agentprime.io/advisories/CVE-2022-20696.md) `CVE-2022-20696` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2022 · Tags: Broken access control - [Cisco SD-WAN vManage Software Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-20734.md) `CVE-2022-20734` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 4.4 Medium · Not analysed yet · Published 4 May 2022 · Tags: Information disclosure - [Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2022-20735.md) `CVE-2022-20735` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Cross-site request forgery (CSRF) - [Cisco SD-WAN vManage Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2022-20739.md) `CVE-2022-20739` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 7.3 High · Not analysed yet · Published 15 Apr 2022 · Tags: Privilege escalation - [Cisco SD-WAN vManage Software Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-20747.md) `CVE-2022-20747` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-202 - [Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability](https://agentprime.io/advisories/CVE-2021-1589.md) `CVE-2021-1589` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-256 - [Cisco SD-WAN vManage Software Cypher Query Language Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-34712.md) `CVE-2021-34712` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.4 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: Other injection - [Cisco SD-WAN vManage Software Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-34700.md) `CVE-2021-34700` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.5 Medium · Not analysed yet · Published 22 Jul 2021 · Tags: Hard-coded credentials - [Cisco SD-WAN vManage Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-1535.md) `CVE-2021-1535` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.3 Medium · Not analysed yet · Published 6 May 2021 · Tags: Information disclosure - [Cisco SD-WAN vManage Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-1515.md) `CVE-2021-1515` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 4.3 Medium · Not analysed yet · Published 6 May 2021 · Tags: Broken access control - [Cisco SD-WAN vManage Software Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1275.md) `CVE-2021-1275` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2021 · Tags: CWE-20 - [Cisco SD-WAN vManage Software Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1284.md) `CVE-2021-1284` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 8.8 High · Not analysed yet · Published 6 May 2021 · Tags: Broken access control - [Cisco SD-WAN vManage Software Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1508.md) `CVE-2021-1508` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2021 · Tags: CWE-20 - [Cisco SD-WAN vManage API Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2021-1507.md) `CVE-2021-1507` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.4 Medium · Not analysed yet · Published 6 May 2021 · Tags: Cross-site scripting (XSS) - [Cisco SD-WAN vManage Software Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1506.md) `CVE-2021-1506` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2021 · Tags: CWE-20 - [Cisco SD-WAN vManage Software Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1505.md) `CVE-2021-1505` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2021 · Tags: CWE-20 - [Cisco SD-WAN vManage HTTP Authentication User Enumeration Vulnerability](https://agentprime.io/advisories/CVE-2021-1486.md) `CVE-2021-1486` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.3 Medium · Not analysed yet · Published 6 May 2021 · Tags: Information disclosure - [Cisco SD-WAN vManage Software Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1468.md) `CVE-2021-1468` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2021 · Tags: CWE-20 - [Cisco SD-WAN vManage SQL Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1225.md) `CVE-2021-1225` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 20 Jan 2021 · Tags: SQL injection - [Cisco SD-WAN vManage Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-1235.md) `CVE-2021-1235` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.5 Medium · Not analysed yet · Published 20 Jan 2021 · Tags: Information disclosure - [Cisco SD-WAN vManage Authorization Bypass Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1305.md) `CVE-2021-1305` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 8.8 High · Not analysed yet · Published 20 Jan 2021 · Tags: CWE-20 - [Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1349.md) `CVE-2021-1349` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 20 Jan 2021 · Tags: Other injection - [Cisco SD-WAN vManage Software Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2021-1259.md) `CVE-2021-1259` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.3 Medium · Not analysed yet · Published 20 Jan 2021 · Tags: Path traversal - [Cisco SD-WAN vManage Authorization Bypass Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1302.md) `CVE-2021-1302` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 8.8 High · Not analysed yet · Published 20 Jan 2021 · Tags: CWE-20 - [Cisco SD-WAN vManage Authorization Bypass Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1304.md) `CVE-2021-1304` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 8.8 High · Not analysed yet · Published 20 Jan 2021 · Tags: CWE-20 - [Cisco SD-WAN vManage Software Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2020-3592.md) `CVE-2020-3592` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: Broken access control - [Cisco SD-WAN vManage Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3591.md) `CVE-2020-3591` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 4.3 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: Cross-site scripting (XSS) - [Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3590.md) `CVE-2020-3590` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.4 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: Cross-site scripting (XSS) - [Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3587.md) `CVE-2020-3587` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.4 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: Cross-site scripting (XSS) - [Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3579.md) `CVE-2020-3579` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.1 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: Cross-site scripting (XSS) - [Cisco SD-WAN vManage Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2020-27129.md) `CVE-2020-27129` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.7 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: Command injection - [Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability](https://agentprime.io/advisories/CVE-2020-27128.md) `CVE-2020-27128` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · EPSS 0.59 · Not analysed yet · Published 6 Nov 2020 · Tags: Path traversal - [Cisco SD-WAN vManage Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3536.md) `CVE-2020-3536` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.4 Medium · Not analysed yet · Published 8 Oct 2020 · Tags: Cross-site scripting (XSS) - [Cisco SD-WAN vManage Software Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2020-3374.md) `CVE-2020-3374` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2020 · Tags: Broken access control - [Cisco SD-WAN Solution Software Buffer Overflow Vulnerability](https://agentprime.io/advisories/CVE-2020-3375.md) `CVE-2020-3375` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2020 · Tags: Memory corruption - [Cisco SD-WAN vManage Software SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2020-3468.md) `CVE-2020-3468` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.4 Medium · Not analysed yet · Published 16 Jul 2020 · Tags: SQL injection - [Cisco SD-WAN vManage Software Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2020-3437.md) `CVE-2020-3437` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2020 · Tags: Path traversal - [Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3406.md) `CVE-2020-3406` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.4 Medium · Not analysed yet · Published 16 Jul 2020 · Tags: Cross-site scripting (XSS) - [Cisco SD-WAN vManage Software Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2020-3401.md) `CVE-2020-3401` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2020 · Tags: Path traversal - [Cisco SD-WAN vManage Software XML External Entity Vulnerability](https://agentprime.io/advisories/CVE-2020-3405.md) `CVE-2020-3405` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2020 · Tags: XML external entities (XXE) - [Cisco SD-WAN vManage Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2020-3388.md) `CVE-2020-3388` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 7.8 High · Not analysed yet · Published 16 Jul 2020 · Tags: Authentication bypass - [Cisco SD-WAN vManage Software Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-3387.md) `CVE-2020-3387` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 16 Jul 2020 · Tags: CWE-20 - [Cisco SD-WAN vManage Software Directory Traversal Vulnerability](https://agentprime.io/advisories/CVE-2020-3381.md) `CVE-2020-3381` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2020 · Tags: Path traversal - [Cisco SD-WAN vManage Software SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2020-3378.md) `CVE-2020-3378` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 4.3 Medium · Not analysed yet · Published 16 Jul 2020 · Tags: SQL injection - [Cisco SD-WAN vManage Software Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3372.md) `CVE-2020-3372` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2020 · Tags: Denial of service Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .