Known vulnerabilities in Catalyst SD-WAN Manager (formerly SD-WAN vManage) - page 4

Software CPE: cpe:2.3:a:cisco_systems:cisco_sd-wan_vmanage:*:*:*:*:*:*:*:*
Total vulnerabilities: 110
Public exploits: 3
Known exploited (KEV): 8
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Catalyst SD-WAN Manager (formerly SD-WAN vManage) Catalyst SD-WAN Manager (formerly SD-WAN vManage) is affected by 110 known vulnerabilities: 3 critical, 11 high, 39 medium, 57 low Critical High Medium Low

Vulnerabilities (110)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52913 - Improper Authorization
CVE-2021-1535
CWE-285 Medium
No
No
20.5.1 06.05.2021 SB2021050616
#VU52912 - Improper Authorization
CVE-2021-1234
CWE-285 Medium
No
No
20.3.1, 20.4.1, 20.5.1 06.05.2021 SB2021050616
#VU52910 - Exposure of sensitive information to an unauthorized actor
CVE-2021-1486
CWE-200 Low
No
No
20.3.3, 20.4.1 06.05.2021 SB2021050616
#VU52485 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2021-1481
CWE-943 Low
No
No
20.5.1 22.04.2021 SB2021042201
#VU52484 - Improper Authorization
CVE-2021-1482
CWE-285 Medium
No
No
20.5.1 22.04.2021 SB2021042201
#VU52483 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-1483
CWE-611 Medium
No
No
20.5.1 22.04.2021 SB2021042201
#VU52482 - Argument Injection or Modification
CVE-2021-1484
CWE-88 Medium
No
No
20.5.1 22.04.2021 SB2021042201
#VU52481 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-1491
CWE-59 Medium
No
No
20.5.1 22.04.2021 SB2021042201
#VU51978 - Permissions, Privileges, and Access Controls
CVE-2021-1480
CWE-264 Low
Available
No
19.2.4, 20.3.3, 20.4.1 08.04.2021 SB2021040804
#VU51977 - Memory corruption
CVE-2021-1479
CWE-119 High
No
No
19.2.4, 20.3.3, 20.4.1 08.04.2021 SB2021040804
#VU51976 - Permissions, Privileges, and Access Controls
CVE-2021-1137
CWE-264 Low
No
No
19.2.4, 20.3.3, 20.4.1 08.04.2021 SB2021040804
#VU51232 - Improper Verification of Cryptographic Signature
CVE-2021-1461
CWE-347 Low
No
No
18.4.5, 19.2.2, 20.1.1, 20.3.1, 20.4.1 04.03.2021 SB2021030427
#VU51231 - Memory corruption
CVE-2021-1466
CWE-119 Low
No
No
18.4.5, 19.2.3, 20.1.12, 20.3.1, 20.4.1 04.03.2021 SB2021030426
#VU51230 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-1470
CWE-89 Low
No
No
19.2.4, 20.3.2, 20.4.1 04.03.2021 SB2021030425
#VU51229 - Permissions, Privileges, and Access Controls
CVE-2021-1462
CWE-264 Low
No
No
18.4.6, 19.2.3, 20.1.2, 20.3.1, 20.4.1 04.03.2021 SB2021030423
#VU51228 - Insufficiently Protected Credentials
CVE-2021-1232
CWE-522 Medium
No
No
20.3.2 04.03.2021 SB2021030424
#VU51227 - Improper Authorization
CVE-2021-1464
CWE-285 Medium
No
No
19.2.3, 20.1.2, 20.3.1, 20.4.1 04.03.2021 SB2021030423
#VU51225 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-1465
CWE-22 Low
No
No
18.4.6, 19.2.4, 20.1.2, 20.3.2, 20.4.1 04.03.2021 SB2021030422
#VU50012 - Memory corruption
CVE-2021-1273
CWE-119 Medium
No
No
- 20.01.2021 SB2021012618
#VU50013 - NULL Pointer Dereference
CVE-2021-1274
CWE-476 Medium
No
No
- 20.01.2021 SB2021012618


Showing elements 61 - 80 out of 110