Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-02-19	CVE-2020-3158	Use of Hard-coded Credentials vulnerability in Cisco Smart Software Manager On-Prem A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. network low complexity cisco CWE-798 critical	9.1
2020-01-26	CVE-2019-16029	Improper Input Validation vulnerability in Cisco Smart Software Manager On-Prem 5.0/5.1.0/6.3.0 A vulnerability in the application programming interface (API) of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service (DoS) condition of the web interface. network low complexity cisco CWE-20 critical	9.1