Cisco Security Manager vulnerabilities

30 CVEs affecting Cisco Security Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-20647, published 2022-01-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-27131, published 2020-11-17. Critical severity, CVSS 9.8. EPSS: 87.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected…
CVE-2020-27130, published 2020-11-17. Critical severity, CVSS 9.1. EPSS: 65.9% chance of exploitation in the next 30 days. A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory…
CVE-2019-12630, published 2019-10-02. Critical severity, CVSS 9.8. EPSS: 65.8% chance of exploitation in the next 30 days. A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The…
CVE-2009-1161, published 2009-05-21. High severity, CVSS 10.0. EPSS: 12.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager,…
CVE-2010-3036, published 2010-10-29. High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days. Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on…
CVE-2019-1903, published 2019-06-20. Critical severity, CVSS 9.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information or cause a denial of service (DoS) condition. The vulnerability is due to…
CVE-2014-3326, published 2014-07-26. Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days. SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID…
CVE-2015-0594, published 2015-02-27. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security Manager, allow remote attackers…
CVE-2020-27125, published 2020-11-17. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of…
CVE-2018-0223, published 2018-03-08. Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS)…

Latest

CVE-2022-20647, published 2022-01-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the…
CVE-2022-20646, published 2022-01-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the…
CVE-2022-20645, published 2022-01-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the…
CVE-2022-20644, published 2022-01-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the…
CVE-2022-20643, published 2022-01-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the…
CVE-2022-20642, published 2022-01-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the…
CVE-2022-20641, published 2022-01-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the…
CVE-2022-20640, published 2022-01-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the…
CVE-2022-20639, published 2022-01-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the…
CVE-2022-20638, published 2022-01-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the…