CVE-2020-27130

🗓️ 17 Nov 2020 03:10:26Reported by ciscoType

Vulnerability in Cisco Security Manager allows unauthenticated remote attacker to gain sensitive information

Reporter	Title	Published	Views	Family All 21
ATTACKERKB	CVE-2020-27130	16 Nov 202023:00	–	attackerkb
BDU FSTEC	The vulnerability of the reporting software for Cisco Security Manager extended security environments lies in improper pathname restrictions, which allow attackers to gain unauthorized access to protected information or to modify, add, or delete data.	3 Dec 202000:00	–	bdu_fstec
Circl	CVE-2020-27130	17 Nov 202007:38	–	circl
Cisco	Cisco Security Manager Path Traversal Vulnerability	16 Nov 202023:00	–	cisco
Tenable Nessus	Cisco Security Manager < 4.22 Path Traversal (cisco-sa-csm-path-trav-NgeRnqgR)	17 Nov 202000:00	–	nessus
Tenable Nessus	Cisco Security Manager < 4.23 Path Traversal Vulnerability (direct check)	24 Nov 202000:00	–	nessus
CNNVD	Cisco Security Manager 安全漏洞	16 Nov 202000:00	–	cnnvd
CNVD	Cisco Security Manager Path Traversal Vulnerability	18 Nov 202000:00	–	cnvd
Check Point Advisories	YSoSerial Payloads Remote Code Execution (CVE-2020-11518; CVE-2020-27130; CVE-2022-29936)	16 Mar 202000:00	–	checkpoint_advisories
Cvelist	CVE-2020-27130 Cisco Security Manager Path Traversal Vulnerability	17 Nov 202003:10	–	cvelist

NVD

Node

cisco security_managerRange≤4.21

[
  {
    "product": "Cisco Security Manager",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csm-path-trav-NgeRnqgR

17 Jun 2026 03:08Current

9.2High risk

Vulners AI Score9.2

CVSS 26.4

CVSS 3.19.1

EPSS0.65907

SSVC

CWE-35