Known vulnerabilities in Catalyst SD-WAN Manager (formerly SD-WAN vManage) - page 2

Software CPE: cpe:2.3:a:cisco_systems:cisco_sd-wan_vmanage:*:*:*:*:*:*:*:*
Total vulnerabilities: 110
Public exploits: 3
Known exploited (KEV): 8
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Catalyst SD-WAN Manager (formerly SD-WAN vManage) Catalyst SD-WAN Manager (formerly SD-WAN vManage) is affected by 110 known vulnerabilities: 3 critical, 11 high, 39 medium, 57 low Critical High Medium Low

Vulnerabilities (110)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108833 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20216
CWE-79 Low
No
No
20.9.7, 20.12.5, 20.15.2 09.05.2025 SB2025050933
#VU108828 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20147
CWE-79 Low
No
No
20.9.7, 20.12.5 09.05.2025 SB2025050930
#VU108826 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20213
CWE-78 Low
No
No
20.12.5, 20.16.1 09.05.2025 SB2025050928
#VU97719 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20475
CWE-79 Low
No
No
20.15.1 26.09.2024 SB2024092613
#VU82208 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-20261
CWE-22 Medium
No
No
20.6.6 18.10.2023 SB2023101866
#VU81275 - Resource exhaustion
CVE-2023-20262
CWE-400 Medium
No
No
20.3.7, 20.9.3, 20.11.1, 20.12.1 29.09.2023 SB2023092920
#VU81273 - Improper Authorization
CVE-2023-20254
CWE-285 Low
No
No
20.6.3.4, 20.9.3.2, 20.10.1.2, 20.11.1.2 29.09.2023 SB2023092919
#VU81271 - Improper Access Control
CVE-2023-20253
CWE-284 Low
No
No
20.6.2, 20.7.1, 20.8.1, 20.9.1, 20.10.1, 20.11.1 29.09.2023 SB2023092918
#VU81269 - Improper Authentication
CVE-2023-20252
CWE-287 High
No
No
20.9.3.4 29.09.2023 SB2023092917
#VU81267 - Improper Access Control
CVE-2023-20034
CWE-284 Medium
No
No
20.3.4, 20.6.1, 20.7.1 29.09.2023 SB2023092916
#VU81264 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20179
CWE-79 Low
No
No
20.6.6 29.09.2023 SB2023092913
#VU78222 - Improper Authentication
CVE-2023-20214
CWE-287 High
No
No
20.6.3.4, 20.6.4.2, 20.6.5.5, 20.9.3.2, 20.10.1.2, 20.11.1.2 13.07.2023 SB2023071302
#VU75364 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-20098
CWE-22 Low
No
No
20.9.3, 20.11.1 20.04.2023 SB2023042013
#VU73982 - Cross-Site Request Forgery (CSRF)
CVE-2023-20113
CWE-352 Low
No
No
20.6.5, 20.8.1, 20.9.1 23.03.2023 SB2023032329
#VU67748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20850
CWE-22 Low
No
No
- 29.09.2022 SB2022092928
#VU67747 - Improper Access Control
CVE-2022-20818
CWE-284 Low
No
No
- 29.09.2022 SB2022092927
#VU67746 - Improper Access Control
CVE-2022-20775
CWE-284 Low
No
Exploited
- 29.09.2022 SB2022092926
#VU67089 - Improper Access Control
CVE-2022-20696
CWE-284 Low
No
No
20.6.4, 20.9.1 08.09.2022 SB2022090805
#VU62804 - Exposure of sensitive information to an unauthorized actor
CVE-2022-20734
CWE-200 Low
No
No
20.6.3, 20.7.2 05.05.2022 SB2022050506
#VU62345 - Improper Access Control
CVE-2022-20716
CWE-284 Low
No
No
20.6.1, 20.7.1 15.04.2022 SB2022041503


Showing elements 21 - 40 out of 110