Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
95 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 1.6% | — | Cisco Catalyst Sd-wan Manager | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not authorized to access.… | |
| Modificada | Alta (8.8) | 1.7% | — | Cisco Catalyst Sd-wan Manager | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not authorized to access.… | |
| Modificada | Crítica (9.8) | 2.1% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Crítica (9.8) | 2.1% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Alta (8.8) | 2.1% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modificada | Alta (8.8) | 2.1% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modificada | Alta (8.6) | 1.4% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Alta (7.5) | 1.7% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Alta (8.6) | 1.9% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Alta (8.6) | 1.9% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Alta (7.8) | 1.4% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modificada | Alta (7.8) | 1.3% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modificada | Alta (7.8) | 1.4% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modificada | Alta (7.8) | 1.4% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 20/1/2021 | 17/6/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modificada | Media (6.5) | 0.80% | — | Cisco Catalyst Sd-wan ManagerCisco Sd-wan Vmanage | 6/11/2020 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system. The vulnerability is due to insufficient authorization checking on an affected system. An attacker could… | |
| Modificada | Media (4.3) | 0.72% | — | Cisco Catalyst Sd-wan ManagerCisco Sd-wan Vmanage | 6/11/2020 | 17/6/2026 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly validate… | |
| Modificada | Media (6.4) | 0.65% | — | Cisco Catalyst Sd-wan ManagerCisco Sd-wan Vmanage | 6/11/2020 | 17/6/2026 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An… | |
| Modificada | Media (6.4) | 0.65% | — | Cisco Catalyst Sd-wan ManagerCisco Sd-wan Vmanage | 6/11/2020 | 17/6/2026 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An… | |
| Modificada | Media (6.1) | 0.84% | — | Cisco Catalyst Sd-wan ManagerCisco Sd-wan Vmanage | 6/11/2020 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly validate… | |
| Modificada | Baja (3.5) | 1.2% | — | Cisco ACS Solution EngineCiscoworksCisco IP CommunicatorCisco Meetingplace+14 | 16/3/2007 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified… |