Known vulnerabilities in Catalyst SD-WAN Manager (formerly SD-WAN vManage) 18.4
Vendor:
Cisco Systems, Inc
Version:
18.4
Software CPE:
cpe:2.3:a:cisco_systems:cisco_sd-wan_vmanage:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
15
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
20.12.8.1
26.2.1
26.1.2
20.18.4
20.15.6
20.12.8
20.9.10
26.1.1.2
20.18.3.1
20.15.5.3
20.15.4.5
20.12.7.2
20.9.9.2
20.15.4.3
20.15.5.1
20.18.2.2
26.1.1
20.15.5
20.18.2.1
20.15.4.2
20.12.5.3
20.12.6.1
20.9.8.2
20.12.4
20.12.3
20.15.2
20.9.7
20.16.1
20.12.5
20.16
20.15
20.15.1
20.14
20.13
20.9.4.1
20.12.1
20.3.7
20.12
20.10.1
20.6.2
20.9.3.4
20.6.6
20.11.1.2
20.10.1.2
20.9.3.2
20.6.5.5
20.6.4.2
20.6.3.4
20.6.3.3
20.11.1
20.9.3
20.11
20.10
20.8.1
20.6.5
20.9.1
20.6.4
20.9
20.8
20.7.2
20.6.3
20.3
20.7
20.7.1
20.6
20.6.1
20.5.2
20.3.4
20.5
20.4
20.4.2
19.2.99
20.5.0
20.4.1.2
20.3.3.1
20.3.2.1
20.1.3
19.2.31
20.4.1.1
20.1.1.1
20.1.0.20.1.1
19.3.0
19.2.099
19.2.097
19.2.0
19.1.0
18.4.4
18.4.303
18.4.302
18.4.3
18.4.0.1
18.4.0
18.3.6.1
18.3.3.1
18.3.1.1
18.3.8
18.3.7
18.3.6
18.3.5
18.3.4
18.3.3
18.3.2
18.3.1
18.3.0
17.2.10
17.2.9
17.2.8
17.2.6
17.2.5
17.2.4
17.2.3
17.2.2
17.2.1
17.2.0
20.5.1
20.3.3
20.1.12
19.2.4
18.4.6
20.4.0
20.4.1
18.2.0
20.3.0
20.3.2
19.2.1
20.3.1
20.1.2
20.1
19.3
20.1.1
19.2.3
17.2.7
19.2
18.4
18.3
19.2.2
18.4.5
-
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU133402 - Improper Encoding or Escaping of Output CVE-2026-20245 |
CWE-116 | High | 20.9.9.2, 20.12.7.2, 20.15.4.5, 20.15.5.3, 20.18.3.1, 26.1.1.2 | 05.06.2026 |
SB2026060506 |
||
| #VU62345 - Improper Access Control CVE-2022-20716 |
CWE-284 | Low | 20.6.1, 20.7.1 | 15.04.2022 |
SB2022041503 |
||
| #VU62344 - Improper Privilege Management CVE-2022-20739 |
CWE-269 | Low | 18.4.6, 19.2.3, 20.1.2, 20.3.1, 20.4.1, 20.5.1, 20.7.1 | 15.04.2022 |
SB2022041501 |
||
| #VU62343 - Exposure of sensitive information to an unauthorized actor CVE-2022-20747 |
CWE-200 | Medium | 20.6.1, 20.7.1 | 15.04.2022 |
SB2022041502 |
||
| #VU51978 - Permissions, Privileges, and Access Controls CVE-2021-1480 |
CWE-264 | Low | 19.2.4, 20.3.3, 20.4.1 | 08.04.2021 |
SB2021040804 |
||
| #VU51977 - Memory corruption CVE-2021-1479 |
CWE-119 | High | 19.2.4, 20.3.3, 20.4.1 | 08.04.2021 |
SB2021040804 |
||
| #VU51976 - Permissions, Privileges, and Access Controls CVE-2021-1137 |
CWE-264 | Low | 19.2.4, 20.3.3, 20.4.1 | 08.04.2021 |
SB2021040804 |
||
| #VU50009 - Improper Authorization CVE-2021-1305 |
CWE-285 | Low | 20.3.2, 20.4.1 | 26.01.2021 |
SB2021012616 |
||
| #VU50008 - Improper Authorization CVE-2021-1304 |
CWE-285 | Low | 20.3.2, 20.4.1 | 26.01.2021 |
SB2021012616 |
||
| #VU50007 - Improper Authorization CVE-2021-1302 |
CWE-285 | Medium | 20.3.2, 20.4.1 | 20.01.2021 |
SB2021012616 |
||
| #VU49917 - Improper Control of Generation of Code ('Code Injection') CVE-2021-1349 |
CWE-94 | Medium | 20.3.2 | 20.01.2021 |
SB2021012131 |
||
| #VU48169 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-26073 |
CWE-22 | Medium | 20.1.2, 20.3.2 | 05.11.2020 |
SB2020110545 |
||
| #VU32920 - Improper Authorization CVE-2020-3374 |
CWE-285 | Medium | 18.4.5, 19.2.2, 20.1.1 | 30.07.2020 |
SB2020073014 |
||
| #VU32919 - Memory corruption CVE-2020-3375 |
CWE-119 | High | 18.4.5, 19.2.3, 20.1.1 | 30.07.2020 |
SB2020073013 |
||
| #VU31690 - Permissions, Privileges, and Access Controls CVE-2020-3180 |
CWE-264 | Low | 18.4.5 | 20.07.2020 |
SB2020072007 |