Known vulnerabilities in Catalyst SD-WAN Manager (formerly SD-WAN vManage) - page 3
Vendor:
Cisco Systems, Inc
Software CPE:
cpe:2.3:a:cisco_systems:cisco_sd-wan_vmanage:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
110
Public exploits:
3
Known exploited (KEV):
8
Highest CVSSv4 Score:
10
Breakdown by Severity Chart
20.12.8.1
26.2.1
26.1.2
20.18.4
20.15.6
20.12.8
20.9.10
26.1.1.2
20.18.3.1
20.15.5.3
20.15.4.5
20.12.7.2
20.9.9.2
20.15.4.3
20.15.5.1
20.18.2.2
26.1.1
20.15.5
20.18.2.1
20.15.4.2
20.12.5.3
20.12.6.1
20.9.8.2
20.12.4
20.12.3
20.15.2
20.9.7
20.16.1
20.12.5
20.16
20.15
20.15.1
20.14
20.13
20.9.4.1
20.12.1
20.3.7
20.12
20.10.1
20.6.2
20.9.3.4
20.6.6
20.11.1.2
20.10.1.2
20.9.3.2
20.6.5.5
20.6.4.2
20.6.3.4
20.6.3.3
20.11.1
20.9.3
20.11
20.10
20.8.1
20.6.5
20.9.1
20.6.4
20.9
20.8
20.7.2
20.6.3
20.3
20.7
20.7.1
20.6
20.6.1
20.5.2
20.3.4
20.5
20.4
20.4.2
19.2.99
20.5.0
20.4.1.2
20.3.3.1
20.3.2.1
20.1.3
19.2.31
20.4.1.1
20.1.1.1
20.1.0.20.1.1
19.3.0
19.2.099
19.2.097
19.2.0
19.1.0
18.4.4
18.4.303
18.4.302
18.4.3
18.4.0.1
18.4.0
18.3.6.1
18.3.3.1
18.3.1.1
18.3.8
18.3.7
18.3.6
18.3.5
18.3.4
18.3.3
18.3.2
18.3.1
18.3.0
17.2.10
17.2.9
17.2.8
17.2.6
17.2.5
17.2.4
17.2.3
17.2.2
17.2.1
17.2.0
20.5.1
20.3.3
20.1.12
19.2.4
18.4.6
20.4.0
20.4.1
18.2.0
20.3.0
20.3.2
19.2.1
20.3.1
20.1.2
20.1
19.3
20.1.1
19.2.3
17.2.7
19.2
18.4
18.3
19.2.2
18.4.5
Vulnerabilities (110)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU62344 - Improper Privilege Management CVE-2022-20739 |
CWE-269 | Low | 18.4.6, 19.2.3, 20.1.2, 20.3.1, 20.4.1, 20.5.1, 20.7.1 | 15.04.2022 |
SB2022041501 |
||
| #VU62343 - Exposure of sensitive information to an unauthorized actor CVE-2022-20747 |
CWE-200 | Medium | 20.6.1, 20.7.1 | 15.04.2022 |
SB2022041502 |
||
| #VU62342 - Cross-Site Request Forgery (CSRF) CVE-2022-20735 |
CWE-352 | Low | 20.6.1, 20.7.1 | 15.04.2022 |
SB2022041502 |
||
| #VU59955 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-20655 |
CWE-78 | Low | 18.4.4, 19.2.1, 19.3.0, 20.1.1 | 24.01.2022 |
SB2022012410 SB2022012512 |
||
| #VU56871 - Command injection CVE-2021-34726 |
CWE-77 | Low | - | 24.09.2021 |
SB2021092423 |
||
| #VU56870 - Improper Neutralization of Special Elements in Data Query Logic CVE-2021-34712 |
CWE-943 | Medium | 20.3.4, 20.4.2, 20.5.1, 20.6.1 | 24.09.2021 |
SB2021092422 |
||
| #VU56869 - Unprotected Storage of Credentials CVE-2021-1589 |
CWE-256 | Medium | 20.3.4, 20.4.2, 20.5.2, 20.6.1 | 24.09.2021 |
SB2021092421 |
||
| #VU55239 - Insufficiently Protected Credentials CVE-2021-34700 |
CWE-522 | Low | 20.4.2, 20.5.1 | 22.07.2021 |
SB2021072234 |
||
| #VU53756 - Execution with Unnecessary Privileges CVE-2021-1528 |
CWE-250 | Low | 20.4.2, 20.5.1 | 03.06.2021 |
SB2021060305 |
||
| #VU52934 - Improper input validation CVE-2021-1514 |
CWE-20 | Low | 18.3.0, 18.4.0, 19.1.0, 19.2.0, 19.3.0, 20.1.1, 20.3.1, 20.4.1, 20.5.1 | 06.05.2021 |
SB2021050623 |
||
| #VU52932 - Improper input validation CVE-2021-1513 |
CWE-20 | Medium | 20.4.1, 20.5.1 | 06.05.2021 |
SB2021050622 |
||
| #VU52931 - Files or Directories Accessible to External Parties CVE-2021-1512 |
CWE-552 | Low | 18.4.6, 19.2.3, 20.1.2, 20.3.1, 20.4.1, 20.5.1 | 06.05.2021 |
SB2021050619 |
||
| #VU52926 - Improper Access Control CVE-2021-1508 |
CWE-284 | Medium | 20.4.1, 20.5.1 | 06.05.2021 |
SB2021050616 |
||
| #VU52925 - Improper Access Control CVE-2021-1506 |
CWE-284 | Low | 20.4.1, 20.5.1 | 06.05.2021 |
SB2021050616 |
||
| #VU52924 - Permissions, Privileges, and Access Controls CVE-2021-1505 |
CWE-264 | Low | 20.4.1, 20.5.1 | 06.05.2021 |
SB2021050616 |
||
| #VU52923 - Improper Authentication CVE-2021-1468 |
CWE-287 | High | 20.4.1, 20.5.1 | 06.05.2021 |
SB2021050616 |
||
| #VU52922 - Resource Management Errors CVE-2021-1275 |
CWE-399 | Medium | 20.4.1, 20.5.1 | 06.05.2021 |
SB2021050616 |
||
| #VU52919 - Improper Authentication CVE-2021-1284 |
CWE-287 | High | 20.4.1, 20.5.1 | 06.05.2021 |
SB2021050616 |
||
| #VU52918 - Improper Access Control CVE-2021-1515 |
CWE-284 | Medium | 20.4.1 | 06.05.2021 |
SB2021050616 |
||
| #VU52915 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-1507 |
CWE-79 | Low | 20.5.1 | 06.05.2021 |
SB2021050616 |
Showing elements 41 - 60 out of 110