Known vulnerabilities in Catalyst SD-WAN Manager (formerly SD-WAN vManage) - page 5

Software CPE: cpe:2.3:a:cisco_systems:cisco_sd-wan_vmanage:*:*:*:*:*:*:*:*
Total vulnerabilities: 110
Public exploits: 3
Known exploited (KEV): 8
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Catalyst SD-WAN Manager (formerly SD-WAN vManage) Catalyst SD-WAN Manager (formerly SD-WAN vManage) is affected by 110 known vulnerabilities: 3 critical, 11 high, 39 medium, 57 low Critical High Medium Low

Vulnerabilities (110)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50009 - Improper Authorization
CVE-2021-1305
CWE-285 Low
No
No
20.3.2, 20.4.1 26.01.2021 SB2021012616
#VU50008 - Improper Authorization
CVE-2021-1304
CWE-285 Low
No
No
20.3.2, 20.4.1 26.01.2021 SB2021012616
#VU49899 - Memory corruption
CVE-2021-1301
CWE-119 Medium
No
No
- 21.01.2021 SB2021012109
#VU49897 - Command injection
CVE-2021-1299
CWE-77 Medium
No
No
- 21.01.2021 SB2021012108
#VU49896 - Command injection
CVE-2021-1298
CWE-77 Medium
No
No
- 21.01.2021 SB2021012108
#VU49895 - Command injection
CVE-2021-1263
CWE-77 Low
No
No
- 21.01.2021 SB2021012108
#VU49894 - Command injection
CVE-2021-1262
CWE-77 Low
No
No
- 21.01.2021 SB2021012108
#VU49893 - Command injection
CVE-2021-1261
CWE-77 Low
No
No
- 21.01.2021 SB2021012108
#VU50006 - Exposure of sensitive information to an unauthorized actor
CVE-2021-1235
CWE-200 Low
No
No
19.2.3, 20.1.1, 20.3.1, 20.4.1 20.01.2021 SB2021012615
#VU50010 - Improper input validation
CVE-2021-1233
CWE-20 Low
No
No
- 20.01.2021 SB2021012617
#VU50014 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-1278
CWE-59 Low
No
No
- 20.01.2021 SB2021012618
#VU50015 - Improper input validation
CVE-2021-1279
CWE-20 Medium
No
No
- 20.01.2021 SB2021012618
#VU49918 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-1225
CWE-89 Medium
No
No
19.2.3 20.01.2021 SB2021012132
#VU50005 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-1259
CWE-22 Medium
No
No
18.2.0 20.01.2021 SB2021012614
#VU50007 - Improper Authorization
CVE-2021-1302
CWE-285 Medium
No
No
20.3.2, 20.4.1 20.01.2021 SB2021012616
#VU49892 - Command injection
CVE-2021-1260
CWE-77 Low
No
No
- 20.01.2021 SB2021012108
#VU49898 - Memory corruption
CVE-2021-1300
CWE-119 High
No
No
- 20.01.2021 SB2021012109
#VU49917 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-1349
CWE-94 Medium
No
No
20.3.2 20.01.2021 SB2021012131
#VU48169 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-26073
CWE-22 Medium
No
No
20.1.2, 20.3.2 05.11.2020 SB2020110545
#VU48162 - Improper Access Control
CVE-2020-3592
CWE-284 Medium
No
No
20.1.2 05.11.2020 SB2020110543


Showing elements 81 - 100 out of 110