Vulnerabilities > Cisco > SD WAN Vmanage > 20.6.2

DATE CVE VULNERABILITY TITLE RISK
2023-09-27 CVE-2023-20179 Cross-site Scripting vulnerability in Cisco Sd-Wan Vmanage
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to inject HTML content. This vulnerability is due to improper validation of user-supplied data in element fields.
network
low complexity
cisco CWE-79
5.4
5.4
2023-05-09 CVE-2023-20098 Path Traversal vulnerability in Cisco Sd-Wan Vmanage
A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vulnerability is due to improper filtering of directory traversal character sequences within system commands.
local
low complexity
cisco CWE-22
6.0
6.0
2022-09-30 CVE-2022-20818 Path Traversal vulnerability in Cisco products
Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges.
local
low complexity
cisco CWE-22
7.8
7.8
2022-09-08 CVE-2022-20696 Unspecified vulnerability in Cisco Sd-Wan Vmanage
A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system.
low complexity
cisco
8.8
8.8
2021-12-10 CVE-2021-44228 Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. 10.0
10