Vulnerabilities fixed in Cisco products

🗓️ 13 Jan 2022 00:00:00Reported by NCSCType

Cisco fixed vulnerabilities enabling cross-site scripting, data access, and privilege escalation; updates released.

Reporter	Title	Published	Views	Family All 84
ATTACKERKB	CVE-2022-20635	13 Jan 202200:00	–	attackerkb
ATTACKERKB	CVE-2022-20658	13 Jan 202200:00	–	attackerkb
ATTACKERKB	CVE-2022-20651	12 Jan 202216:00	–	attackerkb
ATTACKERKB	CVE-2022-20637	13 Jan 202200:00	–	attackerkb
ATTACKERKB	CVE-2022-20636	13 Jan 202200:00	–	attackerkb
BDU FSTEC	The vulnerability of the log management component of the Cisco Adaptive Security Device Manager application allows a perpetrator to gain unauthorized access to protected information.	1 Feb 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager software for managing network services, allows a perpetrator to carry out cross-site scripting attacks.	1 Feb 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.	1 Feb 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.	1 Feb 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.	1 Feb 202200:00	–	bdu_fstec

13 Jan 2022 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 28.5

CVSS 3.19.6

EPSS0.01649

SSVC