Cisco Secure Endpoint Private Cloud vulnerabilities

8 CVEs affecting Cisco Secure Endpoint Private Cloud, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20234, published 2025-06-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-20290, published 2024-02-07. High severity, CVSS 7.5. EPSS: 33.3% chance of exploitation in the next 30 days. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is…
CVE-2023-20032, published 2023-03-01. Critical severity, CVSS 9.8. EPSS: 29.3% chance of exploitation in the next 30 days. On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and…
CVE-2023-20052, published 2023-03-01. Medium severity, CVSS 5.3. EPSS: 6.9% chance of exploitation in the next 30 days. On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and…
CVE-2023-20212, published 2023-08-18. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a…
CVE-2025-20128, published 2025-01-22. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected…
CVE-2023-20197, published 2023-08-16. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…
CVE-2025-20234, published 2025-06-18. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2023-20084, published 2023-11-22. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This…