Known vulnerabilities in Cisco ESW2 Series Advanced Switches
Vendor:
Cisco Systems, Inc
Software:
Cisco ESW2 Series Advanced Switches
Software CPE:
cpe:2.3:h:cisco_systems:cisco_esw2_series_advanced_switches:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU57958 - Insufficient Session Expiration CVE-2021-34739 |
CWE-613 | High | - | 04.11.2021 |
SB2021110416 |
||
| #VU10103 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2017-12308 |
CWE-113 | Low | - | 18.01.2018 |
SB2018011812 |
||
| #VU10102 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-12307 |
CWE-79 | Low | - | 17.01.2018 |
SB2018011812 |
||
| #VU8561 - Improper input validation CVE-2017-6720 |
CWE-20 | Low | - | 21.09.2017 |
SB2017092107 |