|
195821
|
6.5 |
MEDIUM
Network
|
cisco
|
content_security_management_appliance email_security_appliance web_security_appliance ironport_web_security_appliance
|
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and Cisco Web Security App…
|
-
|
CVE-2021-1516
|
2024-11-21 14:44 |
2021-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195822
|
4.3 |
MEDIUM
Adjacent
|
cisco
|
sd-wan_vmanage
|
A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on AP…
|
NVD-CWE-Other
|
CVE-2021-1515
|
2024-11-21 14:44 |
2021-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195823
|
7.8 |
HIGH
Local
|
cisco
|
sd-wan_vbond_orchestrator sd-wan_vmanage catalyst_sd-wan_manager vsmart_controller_firmware vedge_100_firmware vedge_1000_firmware vedge_100b_firmware vedge_100m_firmware vedg…
|
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the underlying operating …
|
CWE-78
OS Command
|
CVE-2021-1514
|
2024-11-21 14:44 |
2021-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195824
|
7.5 |
HIGH
Network
|
cisco
|
sd-wan_vbond_orchestrator catalyst_sd-wan_manager vsmart_controller_firmware vedge_100_firmware vedge_1000_firmware vedge_100b_firmware vedge_100m_firmware vedge_100wm_firmware
|
A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition. This vul…
|
CWE-20
Improper Input Validation
|
CVE-2021-1513
|
2024-11-21 14:44 |
2021-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195825
|
9.8 |
CRITICAL
Network
|
cisco
|
hyperflex_hx_data_platform
|
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. F…
|
CWE-77
Command Injection
|
CVE-2021-1498
|
2024-11-21 14:44 |
2021-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195826
|
9.8 |
CRITICAL
Network
|
cisco
|
hyperflex_hx_data_platform
|
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. F…
|
CWE-78
OS Command
|
CVE-2021-1497
|
2024-11-21 14:44 |
2021-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195827
|
5.3 |
MEDIUM
Network
|
cisco
|
sd-wan_vmanage catalyst_sd-wan_manager
|
A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the improper handling of HTTP headers. An att…
|
-
|
CVE-2021-1486
|
2024-11-21 14:44 |
2021-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195828
|
6.0 |
MEDIUM
Local
|
cisco
|
sd-wan_vbond_orchestrator sd-wan_vmanage catalyst_sd-wan_manager vsmart_controller_firmware vedge_100_firmware vedge_1000_firmware vedge_100b_firmware vedge_100m_firmware vedg…
|
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability i…
|
-
|
CVE-2021-1512
|
2024-11-21 14:44 |
2021-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195829
|
5.4 |
MEDIUM
Network
|
cisco
|
sd-wan_vmanage
|
A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the application web-bas…
|
CWE-79
Cross-site Scripting
|
CVE-2021-1507
|
2024-11-21 14:44 |
2021-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195830
|
5.3 |
MEDIUM
Network
|
cisco
|
hyperflex_hx_data_platform
|
A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is …
|
-
|
CVE-2021-1499
|
2024-11-21 14:44 |
2021-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|