The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to execute arbitrary SQL queries.

The vulnerability in the vManage web interface of the Cisco SD-WAN programmatically defined network is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the vManage web interface of the Cisco SD-WAN program-defined network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to compromise the integrity of protected information.

The vulnerability in the vManage web interface of the Cisco SD-WAN software-defined network is related to errors in handling HTTP requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is due to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Cisco SD-WAN vManage Cypher Query Language Injection (cisco-sa-vmanage-cql-inject-72EhnUc)

According to its self-reported version, Cisco SD-WAN vManage is affected by a information disclosure vulnerability due to insufficient input validation by the web-based management interface. An authenticated, remote attacker can exploit this, via crafted HTTP requests, to obtain sensitive...

Cisco SD-WAN vManage Authorization Bypass (cisco-sa-sdwan-abyp-TnGFHrS)

According to its self-reported version, Cisco SD-WAN vManage is affected by multiple authorization bypass vulnerabilities: - An authorization bypass vulnerability exists in the web-based management interface due to insufficient authorization checks. An authenticated, remote attacker can exploit...

Cisco SD-WAN vManage Software Arbitrary File Creation (cisco-sa-vmanage-file-Y2JSRNRb)

According to its self-reported version, Cisco SD-WAN vManage is affected by an arbitrary file creation vulnerability due to improper validation of requests to APIs. An authenticated, remote attacker can exploit this, by sending malicious requests to an API in the affected system, to conduct...

Cisco SD-WAN vManage SQLi (cisco-sa-vman-sqlinjm-xV8dsjq5)

According to its self-reported version, Cisco SD-WAN vManage is affected by a SQL Injection SQLi vulnerability in the web-based management interface due to improperly validating values in SQL queries. An authenticated, remote attacker can exploit this, by authenticating to the application and...

Cisco SD-WAN vManage Software XSS (cisco-sa-vmxss2-NL4KSSVR)

According to its self-reported version, Cisco SD-WAN vManage is affected by a cross-site scripting XSS vulnerability due to the web-based management interface not properly validating user-supplied input. An unauthenticated, remote attacker can exploit this, by persuading a user to click a crafted...

Cisco SD-WAN vManage Software XXE (cisco-sa-vmanx2-KpFVSUc)

According to its self-reported version, Cisco SD-WAN vManage is affected by an XML external entity XXE vulnerability due to an issue parsing certain XML files. An authenticated, remote attacker can exploit this, by persuading a user to import a crafted XML file with malicious entries, to gain rea...

Cisco SD-WAN vManage Software Path Traversal (cisco-sa-vmanpt2-FqLuefsS)

According to its self-reported version, Cisco SD-WAN vManage is affected by a path traversal vulnerability due to insufficient validation of HTTP requests. An authenticated, remote attacker can exploit this, by sending a crafted HTTP request that contains directory traversal character sequences, ...

Cisco SD-WAN vManage Software Directory Traversal (cisco-sa-vman-traversal-hQh24tmk)

According to its self-reported version, Cisco SD-WAN vManage is affected by a directory traversal vulnerability due to improper validation of directory traversal character sequences within requests to APIs. An unauthenticated, remote attacker can exploit this, by sending malicious requests to an...

Cisco SD-WAN vManage Authorization Bypass Vulnerability

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the web management interface of Cisco SD-WAN vManage, which can be exploited by an attacker by sending a specially crafted HTTP request to...

Cisco SD-WAN vManage Information Disclosure Vulnerability

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An information disclosure vulnerability exists in the CLI of Cisco SD-WAN vManage versions prior to 19.2.3, which can be exploited by an attacker to read database files from the underlying...

Cisco SD-WAN vMange Command Injection Vulnerability

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A command injection vulnerability exists in Cisco SD-WAN vMange. The vulnerability stems from the program not properly validating user input...

Cisco SD-WAN vManage Authorization Bypass Vulnerability (CNVD-2021-05392)

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the web management interface of Cisco SD-WAN vManage. The vulnerability stems from insufficient authorization checking of user account...

Cisco SD-WAN vManage Path Traversal Vulnerability (CNVD-2021-05395)

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. A path traversal vulnerability exists in the Web management interface of Cisco SD-WAN vManage versions prior to 18.2.0. The vulnerability stems from insufficient authentication of HTTP...

Cisco SD-WAN vMange Command Injection Vulnerability (CNVD-2021-05389)

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A command injection vulnerability exists in the Cisco SD-WAN vMange software. The vulnerability stems from the program not properly validati...

Cisco SD-WAN CLI Command Injection Vulnerability (CNVD-2021-05460)

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A command injection vulnerability exists in the CLI of Cisco SD-WAN Software. The vulnerability stems from the program not properly validati...

Cisco SD-WAN vManage SQL Injection Vulnerability

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. A SQL injection vulnerability exists in the Web management interface of Cisco SD-WAN vManage versions prior to 19.2.3. The vulnerability stems from the Web management interface not properl...