Cisco Appdynamics Controller vulnerabilities

3 CVEs affecting Cisco Appdynamics Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20346, published 2024-03-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-20345, published 2024-03-06. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This…
CVE-2022-20736, published 2022-06-15. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a configuration file and the login page for an…
CVE-2024-20346, published 2024-03-06. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, remote attacker to perform a reflected cross-site scripting (XSS) attack against a…