Known vulnerabilities in Cisco Security Manager

Vendor: Cisco Systems, Inc
Software: Cisco Security Manager
Software CPE: cpe:2.3:a:cisco_systems:cisco_security_manager:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 19
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Security Manager Cisco Security Manager is affected by 19 known vulnerabilities: 4 high, 1 medium, 14 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59988 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20647		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59987 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20646		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59986 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20645		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59985 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20644		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59984 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20643		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59983 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20642		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59982 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20641		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59981 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20640		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59980 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20639		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20638		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59978 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20637		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59977 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20636		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU59976 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20635		 CWE-79 Low
No
No
 4.24 25.01.2022 SB2022012509
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU48455 - Deserialization of Untrusted Data
CVE-2020-27131		 CWE-502 High
No
No
 - 17.11.2020 SB2020111706
#VU48456 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-27130		 CWE-22 High
No
No
 4.22 17.11.2020 SB2020111705
#VU48457 - Use of Hard-coded Credentials
CVE-2020-27125		 CWE-798 High
No
No
 4.22 17.11.2020 SB2020111705
#VU10894 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0223		 CWE-79 Low
No
No
 - 08.03.2018 SB2018030909