Known vulnerabilities in Cisco SD-WAN - page 3

Vendor: Cisco Systems, Inc
Software: Cisco SD-WAN
Software CPE: cpe:2.3:a:cisco_systems:cisco_sd-wan:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 66
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco SD-WAN Cisco SD-WAN is affected by 66 known vulnerabilities: 1 critical, 4 high, 18 medium, 43 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26220 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16010		 CWE-79 Low
No
No
 19.2.2 19.03.2020 SB2020031910
#VU26219 - Memory corruption
CVE-2020-3264		 CWE-119 Low
No
No
 19.2.2 19.03.2020 SB2020031910
#VU24683 - Command injection
CVE-2019-12629		 CWE-77 High
No
No
 18.3.0 27.01.2020 SB2020012716
#VU24682 - Permissions, Privileges, and Access Controls
CVE-2020-3115		 CWE-264 Low
No
No
 18.4.302 27.01.2020 SB2020012717
#VU24681 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12628		 CWE-89 Low
No
No
 19.1.0 27.01.2020 SB2020012718
#VU24680 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12619		 CWE-89 Medium
No
No
 18.2.0, 18.3.0, 18.4.0, 19.2.0 27.01.2020 SB2020012719
#VU20326 - Improper input validation
CVE-2019-1951		 CWE-20 Medium
No
No
 - 20.08.2019 SB2019080831
#VU17226 - Buffer overflow
CVE-2019-1651		 CWE-120 High
No
No
 18.4.0 25.01.2019 SB2019012424
#VU17225 - Permissions, Privileges, and Access Controls
CVE-2019-1646		 CWE-264 Low
No
No
 18.4.0 25.01.2019 SB2019012424
#VU17224 - Improper input validation
CVE-2019-1650		 CWE-20 Low
No
No
 18.4.0 25.01.2019 SB2019012424
#VU17223 - Permissions, Privileges, and Access Controls
CVE-2019-1648		 CWE-264 Low
No
No
 18.4.0 25.01.2019 SB2019012424
#VU17222 - Permissions, Privileges, and Access Controls
CVE-2019-1647		 CWE-264 Low
No
No
 - 23.01.2019 SB2019012424
#VU15373 - Improper Certificate Validation
CVE-2018-15387		 CWE-295 Low
No
No
 17.2.8, 18.3.1 03.10.2018 SB2018100314
#VU14654 - Permissions, Privileges, and Access Controls
CVE-2018-0432		 CWE-264 Low
No
No
 18.3.0 06.09.2018 SB2018090606
#VU14649 - Command injection
CVE-2018-0433		 CWE-77 Low
No
No
 18.3.0 06.09.2018 SB2018090606
#VU14644 - Improper Certificate Validation
CVE-2018-0434		 CWE-300 Low
No
No
 18.3.0 05.09.2018 SB2018090606
#VU13942 - Improper input validation
CVE-2018-0349		 CWE-20 Low
No
No
 18.3.0 20.07.2018 SB2018072010
#VU13941 - Buffer overflow
CVE-2018-0346		 CWE-120 Low
No
No
 18.3.0 20.07.2018 SB2018072010
#VU13940 - Command injection
CVE-2018-0345		 CWE-77 Low
No
No
 18.3.0 20.07.2018 SB2018072010
#VU13934 - Command injection
CVE-2018-0344		 CWE-77 Low
No
No
 18.3.0 20.07.2018 SB2018072010


Showing elements 41 - 60 out of 66