catalyst sd-wan manager · threatengine.sh

Home/Product/cisco catalyst sd wan manager

Product

cisco catalyst sd wan manager

85 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on

A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to

A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-W

A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root pri

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary f

A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticat

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local at

A vulnerability in the application data endpoints of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an

A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local at

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attack

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privilege

A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote a

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote a

A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could allow an authenticated, local attack

A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote att

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbit

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote a

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitr

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote a

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote a

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote a

A vulnerability in the vDaemon service of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to cause

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization checki

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary

>= 20.4 and < 20.9.3

A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a pro

A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, loc

A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an una

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attack

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and writ

>= 20.6.4 and < 20.6.4.2

A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthen

A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files.

>= 20.4 and < 20.6.1

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. T

>= 20.7 and < 20.9.1

A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent

>= 20.6 and < 20.6.3

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, local attacker to view sensitive information on an

A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access t

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary comm

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote atta

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. Thi

>= 20.4 and <= 20.4.2

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attack

>= 18.4 and < 20.4.2

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information.

>= 20.5.0 and < 20.5.1

A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitra

>= 20.4 and < 20.4.2

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an

>= 20.1 and < 20.1.1

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to b

A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device

>= 19.2 and < 19.2.3

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in t

>= 20.4 and < 20.4.1

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary cod

>= 20.4 and < 20.4.1

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary cod

>= 20.4 and < 20.4.1

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary cod

>= 20.4 and < 20.4.1

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This

>= 20.4 and < 20.4.1

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary cod

>= 20.4 and < 20.4.1

A vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software could allow an unauthenticated, adja

>= 20.4 and < 20.4.1

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary cod

>= 20.4 and < 20.4.1

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary cod

>= 20.4 and < 20.4.1

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary cod

>= 20.4 and < 20.4.1

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary cod

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (Do

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information o

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remo

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remo

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an af

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an af

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks again

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks again

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (Do

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (Do

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (Do

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (Do

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks again

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks again

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks again

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks again

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attack

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote at

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote at

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote at

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote atta

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin