Known vulnerabilities in Cisco SD-WAN - page 2

Vendor: Cisco Systems, Inc
Software: Cisco SD-WAN
Software CPE: cpe:2.3:a:cisco_systems:cisco_sd-wan:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 66
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco SD-WAN Cisco SD-WAN is affected by 66 known vulnerabilities: 1 critical, 4 high, 18 medium, 43 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49897 - Command injection
CVE-2021-1299		 CWE-77 Medium
No
No
 20.1.2, 20.3.2, 20.4.1 21.01.2021 SB2021012108
#VU49896 - Command injection
CVE-2021-1298		 CWE-77 Medium
No
No
 20.1.2, 20.3.2, 20.4.1 21.01.2021 SB2021012108
#VU49895 - Command injection
CVE-2021-1263		 CWE-77 Low
No
No
 20.1.2, 20.3.2, 20.4.1 21.01.2021 SB2021012108
#VU48168 - Improper Privilege Management
CVE-2020-3594		 CWE-269 Low
No
No
 20.1.2, 20.3.2 05.11.2020 SB2020110543
#VU48167 - Improper Privilege Management
CVE-2020-3600		 CWE-269 Low
No
No
 20.1.2, 20.3.2 05.11.2020 SB2020110543
#VU48166 - Improper Privilege Management
CVE-2020-3593		 CWE-269 Low
No
No
 20.1.2, 20.3.1 05.11.2020 SB2020100811
#VU48165 - Improper Privilege Management
CVE-2020-3595		 CWE-269 Low
No
No
 20.1.2, 20.3.2 05.11.2020 SB2020110543
#VU30556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3381		 CWE-22 Medium
No
No
 19.2.3 17.07.2020 SB2020071709
#VU30506 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3406		 CWE-79 Low
No
No
 19.2.3 17.07.2020 SB2020071709
#VU30499 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-3405		 CWE-611 Medium
No
No
 19.2.3 17.07.2020 SB2020071709
#VU30440 - Improper Link Resolution Before File Access ('Link Following')
CVE-2020-3437		 CWE-59 Medium
No
No
 19.2.3 17.07.2020 SB2020071709
#VU30439 - Improper input validation
CVE-2020-3387		 CWE-20 Medium
No
No
 19.2.3, 20.1.1.1 17.07.2020 SB2020071709
#VU30438 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3401		 CWE-22 Medium
No
No
 19.2.3 17.07.2020 SB2020071709
#VU30436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-3468		 CWE-89 Medium
No
No
 19.2.2, 20.1.1 17.07.2020 SB2020071710
#VU30376 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-3378		 CWE-89 Medium
No
No
 18.4.5, 19.2.3 17.07.2020 SB2020071711
#VU30367 - Resource exhaustion
CVE-2020-3372		 CWE-400 Medium
No
No
 19.2.3, 20.1.12 17.07.2020 SB2020071712
#VU30348 - Improper Authentication
CVE-2020-3388		 CWE-287 Low
No
No
 18.4.5, 19.2.2, 19.2.3, 20.1.1 17.07.2020 SB2020071713
#VU26221 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-16012		 CWE-89 Medium
No
No
 19.2.2 19.03.2020 SB2020031910
#VU26218 - Command injection
CVE-2020-3266		 CWE-77 Low
No
No
 19.2.2 19.03.2020 SB2020031910
#VU26217 - Permissions, Privileges, and Access Controls
CVE-2020-3265		 CWE-264 Low
No
No
 19.2.2 19.03.2020 SB2020031910


Showing elements 21 - 40 out of 66