Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-11-17	CVE-2020-27130	Unspecified vulnerability in Cisco Security Manager A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. network low complexity cisco critical	9.1
2020-11-17	CVE-2020-27131	Deserialization of Untrusted Data vulnerability in Cisco Security Manager Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. network low complexity cisco CWE-502 critical	9.8
2020-11-17	CVE-2020-27125	Improper Input Validation vulnerability in Cisco Security Manager A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system. network low complexity cisco CWE-20 critical	9.8
2019-10-02	CVE-2019-12630	Deserialization of Untrusted Data vulnerability in Cisco Security Manager A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. network low complexity cisco CWE-502 critical	9.8
2019-06-20	CVE-2019-1903	XXE vulnerability in Cisco Security Manager 4.14 A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information or cause a denial of service (DoS) condition. network low complexity cisco CWE-611 critical	9.1