Known vulnerabilities in Cisco Smart Software Manager On-Prem

Vendor: Cisco Systems, Inc
Software: Cisco Smart Software Manager On-Prem
Software CPE: cpe:2.3:a:cisco_systems:cisco_smart_software_manager_on-prem:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 16
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Smart Software Manager On-Prem Cisco Smart Software Manager On-Prem is affected by 16 known vulnerabilities: 1 critical, 6 high, 8 medium, 1 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124787 - Insertion of Sensitive Information Into Sent Data
CVE-2026-20151		 CWE-201 Medium
No
No
 9-202601 01.04.2026 SB2026040170
#VU124786 - Exposure of resource to wrong sphere
CVE-2026-20160		 CWE-668 Critical
No
No
 9-202601 01.04.2026 SB2026040170
#VU94511 - Unverified Password Change
CVE-2024-20419		 CWE-620 High
Available
No
 8-202212 18.07.2024 SB2024071803
#VU76281 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-20110		 CWE-89 Medium
Available
No
 8-202303 18.05.2023 SB2023051808
#VU67954 - Exposure of sensitive information to an unauthorized actor
CVE-2022-20939		 CWE-200 Low
No
No
 8-202206 06.10.2022 SB2022100614
#VU64960 - Resource exhaustion
CVE-2022-20808		 CWE-400 Medium
No
No
 8-202112 07.07.2022 SB2022070702
#VU57105 - Improper Privilege Management
CVE-2021-34766		 CWE-269 Medium
No
No
 8-202108 07.10.2021 SB2021100704
#VU49904 - Command injection
CVE-2021-1141		 CWE-77 Medium
No
No
 6.3.0 21.01.2021 SB2021012110
#VU49903 - Command injection
CVE-2021-1139		 CWE-77 Medium
No
No
 6.3.0 21.01.2021 SB2021012110
#VU49902 - Command injection
CVE-2021-1142		 CWE-77 High
No
No
 6.3.0 21.01.2021 SB2021012110
#VU49901 - Command injection
CVE-2021-1140		 CWE-77 High
No
No
 6.3.0 21.01.2021 SB2021012110
#VU49900 - Command injection
CVE-2021-1138		 CWE-77 High
No
No
 6.3.0 20.01.2021 SB2021012110
#VU45895 - Permissions, Privileges, and Access Controls
CVE-2020-3443		 CWE-264 Medium
No
No
 8 202004 21.08.2020 SB2020082105
#VU29249 - Improper Access Control
CVE-2020-3245		 CWE-284 Medium
No
No
 8 202004 25.06.2020 SB2020062501
#VU25474 - Use of Hard-coded Credentials
CVE-2020-3158		 CWE-798 High
No
No
 7 202001 20.02.2020 SB2020022004
#VU24516 - Improper input validation
CVE-2019-16029		 CWE-20 High
No
No
 7 201910 24.01.2020 SB2020012412