VYPR

Cisco Security Manager

by Cisco Systems, Inc.

CVEs (2)

  • CVE-2020-27130CriNov 17, 2020
    risk 0.64cvss 9.1epss 0.66

    A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could…

  • CVE-2020-27131HigNov 17, 2020
    risk 0.60cvss 8.1epss 0.88

    Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. These vulnerabilities are due to insecure deserialization of user-supplied…