Vulnerabilities > Cisco > Umbrella > High

DATE CVE VULNERABILITY TITLE RISK
2022-04-21 CVE-2022-20773 Use of Hard-coded Credentials vulnerability in Cisco Umbrella
A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an unauthenticated, remote attacker to impersonate a VA.
network
high complexity
cisco CWE-798
8.1
2021-04-08 CVE-2021-1474 Improper Neutralization of Formula Elements in a CSV File vulnerability in Cisco Umbrella
Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device.
local
low complexity
cisco CWE-1236
8.6
2019-05-03 CVE-2019-1807 Session Fixation vulnerability in Cisco Umbrella
A vulnerability in the session management functionality of the web UI for the Cisco Umbrella Dashboard could allow an authenticated, remote attacker to access the Dashboard via an active, user session.
network
low complexity
cisco CWE-384
8.8