Known vulnerabilities in Policy Suite

Known vulnerabilities in Policy Suite

Vendor: Cisco Systems, Inc

Software: Policy Suite

Software CPE: cpe:2.3:a:cisco_systems:policy_suite:*:*:*:*:*:*:*:*

Website: https://www.cisco.com

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU57955 - Use of Hard-coded Cryptographic Key CVE-2021-40119	CWE-321	High	No	No	20.2.1, 21.1.0, 22.1.0	04.11.2021	SB2021110413
#VU16902 - Improper Authentication CVE-2018-0181	CWE-287	Low	No	No	18.3.0	10.01.2019	SB2019011004 SB2019011005
#VU16901 - Exposure of sensitive information to an unauthorized actor CVE-2018-15466	CWE-200	Low	No	No	18.5.0	09.01.2019	SB2019011004
#VU13948 - Use of Hard-coded Credentials CVE-2018-0375	CWE-798	High	No	No	18.1.0, 18.2.0	20.07.2018	SB2018072011
#VU13947 - Missing Authentication for Critical Function CVE-2018-0374	CWE-306	Low	No	No	18.1.0	20.07.2018	SB2018072011
#VU13946 - Missing Authentication for Critical Function CVE-2018-0377	CWE-306	Low	No	No	18.1.0	20.07.2018	SB2018072011
#VU13945 - Missing Authentication for Critical Function CVE-2018-0376	CWE-306	Low	No	No	18.2.0	20.07.2018	SB2018072011
#VU13944 - Improper Authorization CVE-2018-0393	CWE-285	Low	No	No	18.2.0	20.07.2018	SB2018072011
#VU13943 - Exposure of sensitive information to an unauthorized actor CVE-2018-0392	CWE-200	Low	No	No	18.0.0	18.07.2018	SB2018072011
#VU10405 - Permissions, Privileges, and Access Controls CVE-2018-0116	CWE-264	Medium	No	No	-	08.02.2018	SB2018020805
#VU10404 - Exposure of sensitive information to an unauthorized actor CVE-2018-0134	CWE-200	Low	No	No	-	07.02.2018	SB2018020805
#VU10124 - Exposure of sensitive information to an unauthorized actor CVE-2018-0089	CWE-200	Low	No	No	-	22.01.2018	SB2018011915
#VU7978 - Permissions, Privileges, and Access Controls CVE-2017-6781	CWE-264	Low	No	No	-	17.08.2017	SB2017081707
#VU38970 - Improper Privilege Management CVE-2017-6623	CWE-269	Low	No	No	-	18.05.2017	SB2017051816