Known vulnerabilities in Cisco Common Services Platform Collector

Vendor: Cisco Systems, Inc
Software: Cisco Common Services Platform Collector
Software CPE: cpe:2.3:a:cisco_systems:cisco_common_services_platform_collector:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Common Services Platform Collector Cisco Common Services Platform Collector is affected by 17 known vulnerabilities: 17 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20168		 CWE-79 Low
No
No
 - 14.01.2025 SB2025011426
#VU102583 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20167		 CWE-79 Low
No
No
 - 14.01.2025 SB2025011426
#VU102582 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20166		 CWE-79 Low
No
No
 - 14.01.2025 SB2025011426
#VU63451 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20674		 CWE-79 Low
No
No
 2.10.0.2 19.05.2022 SB2022051907
#VU63446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20673		 CWE-79 Low
No
No
 2.10.0.2 19.05.2022 SB2022051907
#VU63443 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20672		 CWE-79 Low
No
No
 2.10.0.2 19.05.2022 SB2022051907
#VU63437 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20671		 CWE-79 Low
No
No
 2.10.0.2 19.05.2022 SB2022051907
#VU63436 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20670		 CWE-79 Low
No
No
 2.10.0.2 19.05.2022 SB2022051907
#VU63434 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20669		 CWE-79 Low
No
No
 2.10.0.2 19.05.2022 SB2022051907
#VU63429 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20668		 CWE-79 Low
No
No
 2.10.0.2 19.05.2022 SB2022051907
#VU63426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20667		 CWE-79 Low
No
No
 2.10.0.2 19.05.2022 SB2022051907
#VU63425 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20666		 CWE-79 Low
No
No
 2.10.0.2 19.05.2022 SB2022051907
#VU58223 - Improper Access Control
CVE-2021-40130		 CWE-284 Low
No
No
 2.9.0.2 18.11.2021 SB2021111803
#VU58222 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-40129		 CWE-89 Low
No
No
 2.9.0.2 18.11.2021 SB2021111803
#VU58221 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-40131		 CWE-79 Low
No
No
 2.9.0.2 18.11.2021 SB2021111803
#VU57949 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34774		 CWE-200 Low
No
No
 2.10.1 04.11.2021 SB2021110407
#VU53755 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1538		 CWE-78 Low
No
No
 2.9.1 03.06.2021 SB2021060304