Cisco Anyconnect Secure Mobility Client vulnerabilities
66 known vulnerabilities affecting cisco/anyconnect_secure_mobility_client.
Total CVEs
66
CISA KEV
2
actively exploited
Public exploits
8
Exploited in wild
2
Severity breakdown
CRITICAL3HIGH26MEDIUM36LOW1
Vulnerabilities
Page 4 of 4
CVE-2015-0664P4MEDIUMCVSS 4.3≤ 4.0\(.00051\)2015-03-18
CVE-2015-0664 [MEDIUM] CWE-20 CVE-2015-0664: The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local user
The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195.
nvd
CVE-2014-8021P4MEDIUMCVSS 4.3≤ 3.1\(.02043\)2015-02-03
CVE-2014-8021 [MEDIUM] CWE-79 CVE-2014-8021: Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043) and
Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043) and earlier and Cisco HostScan Engine 3.1(.05183) and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving an applet-path URL, aka Bug IDs CSCup82990 and CSCuq80149.
nvd
CVE-2015-4290P4MEDIUMCVSS 4.9v4.0\(2049\)2015-07-29
CVE-2015-4290 [MEDIUM] CWE-119 CVE-2015-4290: The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local users
The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local users to cause a denial of service (panic) via vectors involving contiguous memory locations, aka Bug ID CSCut12255.
nvd
CVE-2012-2498P4MEDIUMCVSS 4.0v3.0v3.0.0629+3 more2012-08-06
CVE-2012-2498 [MEDIUM] CWE-287 CVE-2012-2498: Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication ma
Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.
nvd
CVE-2012-2500P4MEDIUMCVSS 4.0v3.0v3.0.0629+1 more2012-08-06
CVE-2012-2500 [MEDIUM] CWE-310 CVE-2012-2500: Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in
Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470.
nvd
CVE-2012-1370P4LOWCVSS 3.5v3.0v3.0.0629+1 more2012-08-06
CVE-2012-1370 [LOW] CWE-119 CVE-2012-1370: Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to ca
Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service (vpnagentd process crash) via a crafted packet, aka Bug ID CSCty01670.
nvd
← Previous4 / 4