Cisco Application Networking Manager vulnerabilities

7 CVEs affecting Cisco Application Networking Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0651, published 2015-02-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-0618, published 2009-02-26. High severity, CVSS 8.5. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java agent in Cisco Application Networking Manager (ANM) before 2.0 Update A allows remote attackers to gain privileges, and cause a denial of service (service…
CVE-2009-0617, published 2009-02-26. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco Application Networking Manager (ANM) before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands or change system…
CVE-2009-0616, published 2009-02-26. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco Application Networking Manager (ANM) before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via…
CVE-2009-0615, published 2009-02-26. High severity, CVSS 9.0. EPSS: 2% chance of exploitation in the next 30 days. Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read…
CVE-2015-0651, published 2015-02-27. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows…
CVE-2013-1196, published 2013-04-29. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System,…
CVE-2013-1125, published 2013-02-19. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network…