Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityPatch nowKEVEPSS 1.82%Sep 30, 2026
- Medium6.5Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityPatch nowKEVEPSS 28.17%Jun 15, 2026
- High7.8Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityPatch nowKEVEPSS 25.32%Jun 4, 2026
- High8.6A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that a…Check if you run itEPSS 1.09%May 14, 2026
- Medium5.4A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to mo…Check if you run itEPSS 0.19%May 14, 2026
- Medium5.4A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to el…Check if you run itEPSS 0.19%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- Medium4.9A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN IO…Check if you run itEPSS 0.17%May 13, 2026
- Medium5.2An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.Check if you run itEPSS 0.22%May 13, 2026
- Medium5.4A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting…Check if you run itEPSS 0.16%Mar 25, 2026
- Critical9.8A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as…Check if you run itEPSS 0.76%Feb 25, 2026
- High7.8A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges on the underlying operating system.Check if you run itEPSS 0.31%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 32.43%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityPatch nowKEVEPSS 7.22%Feb 25, 2026
- Medium5.4Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 25.48%Feb 25, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 88.48%Feb 25, 2026
- High8.6The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary pathsCheck if you run itEPSS 0.60%May 21, 2025
- Critical10.0versa-networks concerto Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 45.82%May 21, 2025
- Critical9.2Versa Concerto Improper Authentication VulnerabilityPatch nowKEVEPSS 81.78%May 21, 2025
- Medium6.0A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system.Check this weekEPSS 17.00%May 7, 2025
- High7.8A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on theCheck this weekEPSS 15.00%May 7, 2025
- Medium5.5A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local fCheck this weekEPSS 17.00%May 7, 2025
- UnknownCisco SD-WAN vManage Software Directory Traversal VulnerabilityPatch nowKEVEPSS 12.58%Jan 5, 2024
- UnknownCitrix SD-WAN and NetScaler Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.55%Dec 5, 2023
- UnknownCitrix SD-WAN and NetScaler Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 39.54%Dec 5, 2023
37 records · page 1 of 2
PreviousNext