Lucene search
K

994 matches found

NCSC
NCSC
added 2026/05/26 7:50 a.m.12 views

Kwetsbaarheid verholpen in Cisco Secure Workload

Cisco has identified a vulnerability in Cisco Secure Workload. This vulnerability resides within the internal REST APIs of Cisco Secure Workload. Unauthorized malicious actors with access to the internal infrastructure can obtain Site Admin privileges through inadequate validation and...

10CVSS5.9AI score0.00064EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/05/20 4:6 p.m.7 views

CVE-2026-20223 Cisco Secure Workload Unauthorized API Access Vulnerability

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST...

10CVSS5.8AI score0.00064EPSS
Exploits1References1
CVE
CVE
added 2026/05/20 4:6 p.m.79 views

CVE-2026-20223

Cisco Secure Workload is affected by a vulnerability in the access validation of internal REST APIs that could allow an unauthenticated, remote attacker to access site resources with Site Admin privileges. The issue arises from insufficient validation/authentication when accessing REST API endpoi...

10CVSS5.8AI score0.00064EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/05/20 4:6 p.m.7 views

CVE-2026-20223

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST...

10CVSS5.8AI score0.00064EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2026/05/20 4:6 p.m.6 views

EUVD-2026-31131

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST...

10CVSS5.8AI score0.00064EPSS
Exploits1References1
Cisco
Cisco
added 2026/05/20 4:0 p.m.7 views

Cisco Secure Workload Unauthorized API Access Vulnerability

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST...

10CVSS5.8AI score0.00064EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/05/20 12:0 a.m.5 views

Cisco Secure Workload 访问控制错误漏洞

Cisco Secure Workload is a software product developed by Cisco Corporation in the United States. It allows users to install software agents on their application workloads. There is an access control vulnerability in Cisco Secure Workload, which stems from insufficient access validation in the...

10CVSS6AI score0.00064EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/05/20 12:0 a.m.9 views

PT-2026-42193

Name of the Vulnerable Software and Affected Versions Cisco Secure Workload versions prior to 3.10.8.3 Cisco Secure Workload versions prior to 4.0.3.17 Description Insufficient validation and authentication in the internal REST API endpoints of Cisco Secure Workload allow an unauthenticated remot...

10CVSS6AI score0.00064EPSS
Exploits1References51
GithubExploit
GithubExploit
added 2026/05/16 5:0 p.m.50 views

Exploit for XML Entity Expansion in Cisco Secure_Endpoint

CVE-2023-20052 Exploit This repository contains a functional...

5.3CVSS7AI score0.04941EPSS
Exploits5
Tenable Nessus
Tenable Nessus
added 2026/05/01 12:0 a.m.2 views

Multiple Cisco Products Snort 3 Multiple DoS (cisco-sa-snort3-multi-dos-XFWkWSwz)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - Multiple Cisco products are affected by vulnerabilities in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3...

5.8CVSS5.8AI score0.00058EPSS
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2026/05/01 12:0 a.m.2 views

Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities (cisco-sa-fmc-sql-injection-2qH6CcJd)

According to its self-reported version, Cisco Secure Firewall Management Center FMC is affected by multiple vulnerabilities. - Multiple vulnerabilities in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to...

8.1CVSS6.2AI score0.00053EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2026/05/01 12:0 a.m.1 views

Cisco Firepower Threat Defense (FTD) Software IKEv2 DoS Vulnerabilities (cisco-sa-asaftd-ikev2-dos-eBueGdEG)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a...

7.7CVSS5.8AI score0.00202EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2026/05/01 12:0 a.m.2 views

Cisco Firepower Threat Defense (FTD) Software TLS with Snort 3 Detection Engine DoS (cisco-sa-ftd-tcp-dos-rHfqnwRg)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by a vulnerability. - A vulnerability in the TLS processing feature of the Snort 3 detection engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote...

5.8CVSS5.8AI score0.0014EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/01 12:0 a.m.0 views

Cisco Adaptive Security Appliance (ASA) Software VPN DoS (cisco-sa-asaftd-vpn-dos-SpOFF2Re)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacke...

8.6CVSS5.9AI score0.00089EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/01 12:0 a.m.2 views

Cisco Firepower Threat Defense (FTD) Software Snort Deep Inspection Bypass (cisco-sa-ftd-snort-bypass-rLggKzVF)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by a vulnerability. - A vulnerability in the Snort detection engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the configured...

5.8CVSS5.8AI score0.00034EPSS
Exploits0References5
NVD
NVD
added 2026/04/15 5:17 p.m.1 views

CVE-2026-20152

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

5.3CVSS0.00073EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/15 4:3 p.m.0 views

CVE-2026-20152 Cisco Secure Web Appliance Authentication Service Traffic Bypass Vulnerability

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

5.3CVSS5.9AI score0.00073EPSS
Exploits0References1
Cisco
Cisco
added 2026/04/15 4:0 p.m.8 views

Cisco Secure Web Appliance Authentication Bypass Vulnerability

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

5.3CVSS5.9AI score0.00073EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/15 12:0 a.m.5 views

Cisco Secure Web Appliance 安全漏洞

Cisco Secure Web Appliance is an application developed by the American company Cisco. It is used to protect websites. There is a security vulnerability in Cisco Secure Web Appliance, which stems from improper validation of authentication inputs provided by users in HTTP requests. This vulnerabili...

5.3CVSS5.8AI score0.00073EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.5 views

Cisco Secure Firewall Management Center Software RCE (cisco-sa-fmc-rce-NKhnULJh)

According to its self-reported version, Cisco Secure Firewall Management Center FMC is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary...

10CVSS6.6AI score0.01403EPSS
Exploits4References4
Rows per page
Query Builder