Enterprise Network Function Virtualization Infrastructure

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-04	CVE-2020-3478	Improper Input Validation vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. network low complexity cisco CWE-20	8.1
2020-09-04	CVE-2020-3365	Path Traversal vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal attack on a limited set of restricted directories. network low complexity cisco CWE-22	6.5
2020-06-18	CVE-2020-3236	Path Traversal vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to gain root shell access to the underlying operating system and overwrite or read arbitrary files. local low complexity cisco CWE-22	6.7
2020-02-19	CVE-2020-3138	Improper Verification of Cryptographic Signature vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to install a malicious file when upgrading. local low complexity cisco CWE-347	6.7
2019-08-08	CVE-2019-1973	Cross-site Scripting vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. network low complexity cisco CWE-79	4.8
2019-08-08	CVE-2019-1972	Unspecified vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure A vulnerability the Cisco Enterprise NFV Infrastructure Software (NFVIS) restricted CLI could allow an authenticated, local attacker with valid administrator-level credentials to elevate privileges and execute arbitrary commands on the underlying operating system as root. local low complexity cisco	6.7
2019-08-08	CVE-2019-1971	Improper Input Validation vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary commands with root privileges. network low complexity cisco CWE-20 critical	9.8
2019-08-08	CVE-2019-1961	Improper Input Validation vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. network low complexity cisco CWE-20	4.9
2019-08-08	CVE-2019-1960	OS Command Injection vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. local low complexity cisco CWE-78	4.4
2019-08-08	CVE-2019-1959	OS Command Injection vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. local low complexity cisco CWE-78	4.4