Cisco SD-WAN Solution SQL Injection Vulnerability

A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could...

Cisco SD-WAN Solution SQL Injection Vulnerability

A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could...

PT-2020-1387

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage software affected versions not specified Description The issue is related to insufficient input validation in the CLI of the Cisco SD-WAN Solution vManage software, allowing an authenticated, local attacker to...

PT-2020-1434

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description The issue is related to insufficient input validation of data parameters for certain fields in the Cisco SD-WAN Solution, allowing an authenticated, remote attacker to inject an...

PT-2020-1435

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage affected versions not specified Description The issue is related to input validation errors in the web interface of Cisco SD-WAN vManage, which can be exploited by a remote attacker to execute arbitrary SQL queries...

PT-2020-1573

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage affected versions not specified Description A vulnerability in the web interface could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The...

The vulnerability in the vManage web interface of Cisco SD-WAN’s programmatically defined network allows a attacker to bypass authentication procedures and gain access to system files.

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

CVE-2019-16002

A vulnerability in the vManage web-based UI web UI of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected instan...

Cross site request forgery (csrf)

A vulnerability in the vManage web-based UI web UI of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected instan...

CVE-2019-16002 Cisco SD-WAN Solution vManage Cross-Site Request Forgery Vulnerability

A vulnerability in the vManage web-based UI web UI of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected instan...

CVE-2019-16002: Cross-Site Request Forgery (CSRF)

A vulnerability in the vManage web-based UI web UI of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected instan...

Cisco SD-WAN Solution vManage Cross-Site Request Forgery Vulnerability

A vulnerability in the vManage web-based UI web UI of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected instan...

PT-2019-4238

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage affected versions not specified Description The issue is related to a cross-site request forgery CSRF attack in the vManage web-based UI of the Cisco SD-WAN Solution. This attack could allow an unauthenticated,...

Cisco SD-WAN Solution Command Injection Vulnerability (CNVD-2019-19047)

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco. the CLI is a command line interface. A command injection vulnerability exists in the vManage Web UI in Cisco SD-WAN Solution versions prior to 18.4.0, which stems from the program failing to perform sufficient input...

CVE-2019-1624

A vulnerability in the vManage web-based UI Web UI in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...

CVE-2019-1626

A vulnerability in the vManage web-based UI Web UI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the device configuration. An...

Spoofing

A vulnerability in the vManage web-based UI Web UI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the device configuration. An...

CVE-2019-1624

CVE-2019-1624 affects Cisco SD-WAN vManage Web UI. Root cause: insufficient input validation allowing command injection by an authenticated, remote attacker submitting crafted input. Impact: commands executed with root privileges on the device. Affected: vManage Web UI within Cisco SD-WAN Solutio...

CVE-2019-1626 Cisco SD-WAN Solution Privilege Escalation Vulnerability

A vulnerability in the vManage web-based UI Web UI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the device configuration. An...

CVE-2019-1626

CVE-2019-1626 is a privilege-escalation flaw in Cisco SD-WAN vManage Web UI. An authenticated, remote attacker could exploit a failure to properly authorize certain user actions in the device configuration by sending crafted HTTP requests via the vManage Web UI, gaining elevated privileges and al...