Known vulnerabilities in Cisco SD-WAN - page 2

Vendor: Cisco Systems, Inc
Software: Cisco SD-WAN
Software CPE: cpe:2.3:a:cisco_systems:cisco_sd-wan:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 66
Public exploits: 0
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco SD-WAN Cisco SD-WAN is affected by 66 known vulnerabilities: 1 critical, 4 high, 18 medium, 43 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48168 - Improper Privilege Management
CVE-2020-3594		 CWE-269 Low
No
No
 20.1.2, 20.3.2 05.11.2020 SB2020110543
#VU48167 - Improper Privilege Management
CVE-2020-3600		 CWE-269 Low
No
No
 20.1.2, 20.3.2 05.11.2020 SB2020110543
#VU48166 - Improper Privilege Management
CVE-2020-3593		 CWE-269 Low
No
No
 20.1.2, 20.3.1 05.11.2020 SB2020100811
#VU48165 - Improper Privilege Management
CVE-2020-3595		 CWE-269 Low
No
No
 20.1.2, 20.3.2 05.11.2020 SB2020110543
#VU30556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3381		 CWE-22 Medium
No
No
 19.2.3 17.07.2020 SB2020071709
#VU30506 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3406		 CWE-79 Low
No
No
 19.2.3 17.07.2020 SB2020071709
#VU30499 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-3405		 CWE-611 Medium
No
No
 19.2.3 17.07.2020 SB2020071709
#VU30440 - Improper Link Resolution Before File Access ('Link Following')
CVE-2020-3437		 CWE-59 Medium
No
No
 19.2.3 17.07.2020 SB2020071709
#VU30439 - Improper input validation
CVE-2020-3387		 CWE-20 Medium
No
No
 19.2.3, 20.1.1.1 17.07.2020 SB2020071709
#VU30438 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3401		 CWE-22 Medium
No
No
 19.2.3 17.07.2020 SB2020071709
#VU30436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-3468		 CWE-89 Medium
No
No
 19.2.2, 20.1.1 17.07.2020 SB2020071710
#VU30376 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-3378		 CWE-89 Medium
No
No
 18.4.5, 19.2.3 17.07.2020 SB2020071711
#VU30367 - Resource exhaustion
CVE-2020-3372		 CWE-400 Medium
No
No
 19.2.3, 20.1.12 17.07.2020 SB2020071712
#VU30348 - Improper Authentication
CVE-2020-3388		 CWE-287 Low
No
No
 18.4.5, 19.2.2, 19.2.3, 20.1.1 17.07.2020 SB2020071713
#VU26221 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-16012		 CWE-89 Medium
No
No
 19.2.2 19.03.2020 SB2020031910
#VU26220 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16010		 CWE-79 Low
No
No
 19.2.2 19.03.2020 SB2020031910
#VU26219 - Memory corruption
CVE-2020-3264		 CWE-119 Low
No
No
 19.2.2 19.03.2020 SB2020031910
#VU26218 - Command injection
CVE-2020-3266		 CWE-77 Low
No
No
 19.2.2 19.03.2020 SB2020031910
#VU20326 - Improper input validation
CVE-2019-1951		 CWE-20 Medium
No
No
 - 20.08.2019 SB2019080831
#VU15373 - Improper Certificate Validation
CVE-2018-15387		 CWE-295 Low
No
No
 17.2.8, 18.3.1 03.10.2018 SB2018100314


Showing elements 21 - 40 out of 66