Cisco Appdynamics Controller vulnerabilities

CVE-2024-20345 [MEDIUM] CWE-26 CVE-2024-20345: A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an auth A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affect

CVE-2022-20736 [MEDIUM] CWE-939 CVE-2022-20736: A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a configuration file and the login page for an administrative console that they would not normally have authorization to access. This vulnerability is due to improper authorization checking for HTTP

CVE-2024-20346 [MEDIUM] CWE-79 CVE-2024-20346: A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, remote attacker to perform a reflected cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management inte