Cisco Smart Software Manager On-Prem vulnerabilities

14 CVEs affecting Cisco Smart Software Manager On-Prem, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20160, published 2026-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-20419, published 2024-07-17. Critical severity, CVSS 10.0. EPSS: 80.6% chance of exploitation in the next 30 days. A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including…
CVE-2020-3158, published 2020-02-19. Critical severity, CVSS 9.1. EPSS: 2.6% chance of exploitation in the next 30 days. A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a…
CVE-2020-3443, published 2020-08-26. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The…
CVE-2021-1222, published 2021-01-20. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.…
CVE-2020-3245, published 2020-06-18. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the web application of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is…
CVE-2023-20110, published 2023-05-18. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to conduct SQL injection attacks on an…
CVE-2019-16029, published 2020-01-26. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the application programming interface (API) of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can…
CVE-2022-20808, published 2022-07-06. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2021-34766, published 2021-10-06. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and…
CVE-2026-20160, published 2026-04-01. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected…

Latest

CVE-2026-20151, published 2026-04-01. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges on an affected system. This…
CVE-2022-20939, published 2024-11-15. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This…
CVE-2021-1219, published 2021-01-20. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Smart Software Manager Satellite could allow an authenticated, local attacker to access sensitive information on an affected system. The vulnerability is due to insufficient…
CVE-2021-1218, published 2021-01-20. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, remote attacker to redirect a user to an undesired web page. The vulnerability…