10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.964 High
EPSS
Percentile
99.5%
On Wednesday, Cisco Systems Inc. posted a 26 the patch, including its IOS-XE operating system and two small business RV320 and RV325 router of bug fixes. A total of 19 vulnerabilities is Cisco rated the severity level, other vulnerabilities were rated medium level. In the high severity vulnerabilities, 15 with the Cisco Internetoperating system๏ผIOS XE correlation, which runs on Cisco network devices, such as switches, controllers and routers. Vulnerability types include privilege escalation, injection and denial of service vulnerabilities.
Cisco also released four other vulnerability information, including: Moodle mybackpack features server-side request forgery vulnerability, CVE-2019-3809, may allow a remote, unauthenticated attacker on the target system for the server-side request forgery attacks; in the Elastic Kibana security audit logger, found a second serious vulnerability that could lead to arbitrary code execution๏ผCVE-2019-7610; the Python urllib security bypass vulnerability, CVE-2019-9948; the Elastic Kibana Timelion Visualizer arbitrary code execution vulnerability, CVE-2019-7609-in.
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.964 High
EPSS
Percentile
99.5%