Advisories · Technology

Cisco SD-WAN vManage.

Every CVE that names Cisco SD-WAN vManage among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-20261 CVE record

CVSS 6.5 Medium

Improper access control in Cisco SD-WAN vManage
- Cisco SD-WAN vManage
- Broken access control
Not analysed yet 18 Oct 2023
CVE-2023-20179 CVE record

CVSS 4.3 Medium

Cross-site scripting in Cisco SD-WAN vManage
- Cisco SD-WAN vManage
- Cross-site scripting (XSS)
Not analysed yet 27 Sept 2023
CVE-2023-20252 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authorization in Cisco SD-WAN vManage
- Cisco SD-WAN vManage
- Broken access control
Not analysed yet 27 Sept 2023
CVE-2023-20262 CVE record

CVSS 5.3 Medium

A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only.
- Cisco SD-WAN Solution
- Cisco SD-WAN vManage
- CWE-399
Not analysed yet 27 Sept 2023
CVE-2023-20034 CVE record

CVSS 7.5 High

Hard-coded credentials in Cisco SD-WAN vManage
- Cisco SD-WAN vManage
- Hard-coded credentials
Not analysed yet 27 Sept 2023
CVE-2023-20253 CVE record

CVSS 7.1 High

Cisco SD-WAN vManage: A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN…
- Cisco SD-WAN vManage
- CWE-286
Not analysed yet 27 Sept 2023
CVE-2023-20254 CVE record

CVSS 7.2 High

A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attacker to access another tenant that is being managed…
- Cisco SD-WAN vManage
Not analysed yet 27 Sept 2023
CVE-2020-26064 CVE record

CVSS 6.5 Medium

XML external entity injection in Cisco SD-WAN vManage
- Cisco SD-WAN vManage
- XML external entities (XXE)
Not analysed yet 4 Aug 2023
CVE-2020-26065 CVE record

CVSS 6.5 Medium

Path traversal in Cisco SD-WAN vManage
- Cisco SD-WAN vManage
- Path traversal
Not analysed yet 4 Aug 2023
CVE-2023-20214 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper authentication in Cisco SD-WAN vManage
- Cisco SD-WAN vManage
- Authentication bypass
Not analysed yet 3 Aug 2023
CVE-2023-20098 CVE record

CVSS 4.4 Medium

Path traversal in Cisco SD-WAN vManage
- Cisco SD-WAN vManage
- Path traversal
Not analysed yet 9 May 2023
CVE-2023-20113 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability
- Cisco SD-WAN vManage
- Cross-site request forgery (CSRF)
Not analysed yet 23 Mar 2023
CVE-2022-20830 CVE record

CVSS 5.3 Medium

Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability
- Cisco SD-WAN vManage
- Authentication bypass
Not analysed yet 10 Oct 2022
CVE-2022-20930 CVE record

CVSS 6.7 Medium

Cisco SD-WAN Software Arbitrary File Corruption Vulnerability
- Cisco SD-WAN vManage
- Command injection
Not analysed yet 30 Sept 2022
CVE-2022-20844 CVE record

CVSS 5.3 Medium

Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability
- Cisco SD-WAN vManage
- Hard-coded credentials
Not analysed yet 30 Sept 2022
CVE-2022-20696 CVE record

CVSS 7.5 High

Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability
- Cisco SD-WAN vManage
- Broken access control
Not analysed yet 8 Sept 2022
CVE-2022-20734 CVE record

CVSS 4.4 Medium

Cisco SD-WAN vManage Software Information Disclosure Vulnerability
- Cisco SD-WAN vManage
- Information disclosure
Not analysed yet 4 May 2022
CVE-2022-20735 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability
- Cisco SD-WAN vManage
- Cross-site request forgery (CSRF)
Not analysed yet 15 Apr 2022
CVE-2022-20739 CVE record

CVSS 7.3 High

Cisco SD-WAN vManage Software Privilege Escalation Vulnerability
- Cisco SD-WAN vManage
- Privilege escalation
Not analysed yet 15 Apr 2022
CVE-2022-20747 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software Information Disclosure Vulnerability
- Cisco SD-WAN vManage
- CWE-202
Not analysed yet 15 Apr 2022
CVE-2021-1589 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability
- Cisco SD-WAN vManage
- CWE-256
Not analysed yet 23 Sept 2021
CVE-2021-34712 CVE record

CVSS 5.4 Medium

Cisco SD-WAN vManage Software Cypher Query Language Injection Vulnerability
- Cisco SD-WAN vManage
- Other injection
Not analysed yet 23 Sept 2021
CVE-2021-34700 CVE record

CVSS 5.5 Medium

Cisco SD-WAN vManage Software Information Disclosure Vulnerability
- Cisco SD-WAN vManage
- Hard-coded credentials
Not analysed yet 22 Jul 2021
CVE-2021-1535 CVE record

CVSS 5.3 Medium

Cisco SD-WAN vManage Information Disclosure Vulnerability
- Cisco SD-WAN vManage
- Information disclosure
Not analysed yet 6 May 2021
CVE-2021-1515 CVE record

CVSS 4.3 Medium

Cisco SD-WAN vManage Information Disclosure Vulnerability
- Cisco SD-WAN vManage
- Broken access control
Not analysed yet 6 May 2021
CVE-2021-1275 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco SD-WAN vManage Software Vulnerabilities
- Cisco SD-WAN vManage
- CWE-20
Not analysed yet 6 May 2021
CVE-2021-1284 CVE record

CVSS 8.8 High

Cisco SD-WAN vManage Software Authentication Bypass Vulnerability
- Cisco SD-WAN vManage
- Broken access control
Not analysed yet 6 May 2021
CVE-2021-1508 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco SD-WAN vManage Software Vulnerabilities
- Cisco SD-WAN vManage
- CWE-20
Not analysed yet 6 May 2021
CVE-2021-1507 CVE record

CVSS 6.4 Medium

Cisco SD-WAN vManage API Stored Cross-Site Scripting Vulnerability
- Cisco SD-WAN vManage
- Cross-site scripting (XSS)
Not analysed yet 6 May 2021
CVE-2021-1506 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco SD-WAN vManage Software Vulnerabilities
- Cisco SD-WAN vManage
- CWE-20
Not analysed yet 6 May 2021
CVE-2021-1505 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco SD-WAN vManage Software Vulnerabilities
- Cisco SD-WAN vManage
- CWE-20
Not analysed yet 6 May 2021
CVE-2021-1486 CVE record

CVSS 5.3 Medium

Cisco SD-WAN vManage HTTP Authentication User Enumeration Vulnerability
- Cisco SD-WAN vManage
- Information disclosure
Not analysed yet 6 May 2021
CVE-2021-1468 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco SD-WAN vManage Software Vulnerabilities
- Cisco SD-WAN vManage
- CWE-20
Not analysed yet 6 May 2021
CVE-2021-1225 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage SQL Injection Vulnerabilities
- Cisco SD-WAN vManage
- SQL injection
Not analysed yet 20 Jan 2021
CVE-2021-1235 CVE record

CVSS 5.5 Medium

Cisco SD-WAN vManage Information Disclosure Vulnerability
- Cisco SD-WAN vManage
- Information disclosure
Not analysed yet 20 Jan 2021
CVE-2021-1305 CVE record

CVSS 8.8 High

Cisco SD-WAN vManage Authorization Bypass Vulnerabilities
- Cisco SD-WAN vManage
- CWE-20
Not analysed yet 20 Jan 2021
CVE-2021-1349 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability
- Cisco SD-WAN vManage
- Other injection
Not analysed yet 20 Jan 2021
CVE-2021-1259 CVE record

CVSS 5.3 Medium

Cisco SD-WAN vManage Software Path Traversal Vulnerability
- Cisco SD-WAN vManage
- Path traversal
Not analysed yet 20 Jan 2021
CVE-2021-1302 CVE record

CVSS 8.8 High

Cisco SD-WAN vManage Authorization Bypass Vulnerabilities
- Cisco SD-WAN vManage
- CWE-20
Not analysed yet 20 Jan 2021
CVE-2021-1304 CVE record

CVSS 8.8 High

Cisco SD-WAN vManage Authorization Bypass Vulnerabilities
- Cisco SD-WAN vManage
- CWE-20
Not analysed yet 20 Jan 2021
CVE-2020-3592 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software Authorization Bypass Vulnerability
- Cisco SD-WAN vManage
- Broken access control
Not analysed yet 6 Nov 2020
CVE-2020-3591 CVE record

CVSS 4.3 Medium

Cisco SD-WAN vManage Cross-Site Scripting Vulnerability
- Cisco SD-WAN vManage
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2020
CVE-2020-3590 CVE record

CVSS 6.4 Medium

Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability
- Cisco SD-WAN vManage
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2020
CVE-2020-3587 CVE record

CVSS 6.4 Medium

Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability
- Cisco SD-WAN vManage
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2020
CVE-2020-3579 CVE record

CVSS 6.1 Medium

Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability
- Cisco SD-WAN vManage
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2020
CVE-2020-27129 CVE record

CVSS 6.7 Medium

Cisco SD-WAN vManage Software Command Injection Vulnerability
- Cisco SD-WAN vManage
- Command injection
Not analysed yet 6 Nov 2020
CVE-2020-27128 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability
- Cisco SD-WAN vManage
- Path traversal
Not analysed yet 6 Nov 2020
CVE-2020-3536 CVE record

CVSS 6.4 Medium

Cisco SD-WAN vManage Cross-Site Scripting Vulnerability
- Cisco SD-WAN vManage
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2020
CVE-2020-3374 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Cisco SD-WAN vManage Software Authorization Bypass Vulnerability
- Cisco SD-WAN vManage
- Broken access control
Not analysed yet 31 Jul 2020
CVE-2020-3375 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco SD-WAN Solution Software Buffer Overflow Vulnerability
- Cisco SD-WAN vManage
- Memory corruption
Not analysed yet 31 Jul 2020
CVE-2020-3468 CVE record

CVSS 5.4 Medium

Cisco SD-WAN vManage Software SQL Injection Vulnerability
- Cisco SD-WAN vManage
- SQL injection
Not analysed yet 16 Jul 2020
CVE-2020-3437 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software Information Disclosure Vulnerability
- Cisco SD-WAN vManage
- Path traversal
Not analysed yet 16 Jul 2020
CVE-2020-3406 CVE record

CVSS 6.4 Medium

Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability
- Cisco SD-WAN vManage
- Cross-site scripting (XSS)
Not analysed yet 16 Jul 2020
CVE-2020-3401 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software Path Traversal Vulnerability
- Cisco SD-WAN vManage
- Path traversal
Not analysed yet 16 Jul 2020
CVE-2020-3405 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software XML External Entity Vulnerability
- Cisco SD-WAN vManage
- XML external entities (XXE)
Not analysed yet 16 Jul 2020
CVE-2020-3388 CVE record

CVSS 7.8 High

Cisco SD-WAN vManage Software Command Injection Vulnerability
- Cisco SD-WAN vManage
- Authentication bypass
Not analysed yet 16 Jul 2020
CVE-2020-3387 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Cisco SD-WAN vManage Software Remote Code Execution Vulnerability
- Cisco SD-WAN vManage
- CWE-20
Not analysed yet 16 Jul 2020
CVE-2020-3381 CVE record

CVSS 8.8 High

Cisco SD-WAN vManage Software Directory Traversal Vulnerability
- Cisco SD-WAN vManage
- Path traversal
Not analysed yet 16 Jul 2020
CVE-2020-3378 CVE record

CVSS 4.3 Medium

Cisco SD-WAN vManage Software SQL Injection Vulnerability
- Cisco SD-WAN vManage
- SQL injection
Not analysed yet 16 Jul 2020
CVE-2020-3372 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software Denial of Service Vulnerability
- Cisco SD-WAN vManage
- Denial of service
Not analysed yet 16 Jul 2020