20.5

DATE	CVE	VULNERABILITY TITLE	RISK
2021-09-23	CVE-2021-1546	Information Exposure Through an Error Message vulnerability in Cisco products A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. local low complexity cisco CWE-209	5.5
2021-05-06	CVE-2021-1507	Cross-site Scripting vulnerability in Cisco Sd-Wan Vmanage A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the application web-based interface. network low complexity cisco CWE-79	5.4
2021-05-06	CVE-2021-1535	Unspecified vulnerability in Cisco Sd-Wan Vmanage A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. network low complexity cisco	5.3