18.4.5

DATE	CVE	VULNERABILITY TITLE	RISK
2020-11-06	CVE-2020-27128	Path Traversal vulnerability in Cisco Sd-Wan A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system. network low complexity cisco CWE-22	6.5
2020-10-08	CVE-2020-3536	Cross-site Scripting vulnerability in Cisco Sd-Wan A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. network low complexity cisco CWE-79	5.4