Cisco Catalyst Sd-Wan Manager vulnerabilities
45 known vulnerabilities affecting cisco/cisco_catalyst_sd-wan_manager.
Total CVEs
45
CISA KEV
8
actively exploited
Public exploits
4
Exploited in wild
9
Severity breakdown
CRITICAL6HIGH13MEDIUM26
Vulnerabilities
Page 3 of 3
CVE-2024-20475P4MEDIUMCVSS 5.4v20.6.1v20.6.1.1+100 more2024-09-25
CVE-2024-20475 [MEDIUM] CWE-79 CVE-2024-20475: A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cis
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.
This vulnerability exists because the web-based management interface does not properly validate user-suppl
nvd
CVE-2025-20147P4MEDIUMCVSS 5.4v20.1.12v19.2.1+295 more2025-05-07
CVE-2025-20147 [MEDIUM] CWE-79 CVE-2025-20147: A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cis
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a stored cross-site scripting attack (XSS) on an affected system.
This vulnerability is due to improper sanitization of user input to the web-based management interface. An at
nvd
CVE-2026-20108P4MEDIUMCVSS 5.4v20.12.1v20.12.1_LI_Images+22 more2026-03-25
CVE-2026-20108 [MEDIUM] CWE-79 CVE-2026-20108: A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow a
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device.
This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by p
nvd
CVE-2021-1481P4MEDIUMCVSS 4.3v20.1.12v19.2.1+62 more2024-11-15
CVE-2021-1481 [MEDIUM] CWE-943 CVE-2021-1481: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could al
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct Cypher query language injection attacks on an affected system.
This vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by
nvd
CVE-2025-20216P4MEDIUMCVSS 4.3v20.1.12v19.2.1+301 more2025-05-07
CVE-2025-20216 [MEDIUM] CWE-74 CVE-2025-20216: A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage
A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user.
This vulnerability is due to improper sanitization of input to the web interface. An attacker could exploit this vulnerability by convincing an
nvd
← Previous3 / 3