CVE Feed

    Dashboard / CVE / CVE-2021-1507

    CVE-2021-1507

    A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the application web-based interface. This vulnerability exists because the API does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending malicious input to the API. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web-based interface or access sensitive, browser-based information.

    Published:May 6, 2021
    Last Modified:Nov 21, 2024
    EPS:May 6, 2021
    EPSS Score:0.00152
    CVSS Score:6.4

    Affected Products

    Vendor
    Cisco
    Product
    Sd-wan Vmanage

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-20179 (CVSS 4.3) — A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN …
    CVE-2023-20262 (CVSS 5.3) — A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote att…
    CVE-2023-20253 (CVSS 7.1) — A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow a…
    CVE-2023-20214 (CVSS 9.1) — A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software cou…
    CVE-2023-20098 (CVSS 4.4) — A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to del…
    CVE-2022-20830 (CVSS 5.3) — A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-A…
    CVE-2022-20930 (CVSS 6.7) — A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite …
    CVE-2022-20850 (CVSS 5.5) — A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow a…
    CVE-2022-20818 (CVSS 7.8) — Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to g…
    CVE-2022-20696 (CVSS 7.5) — A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauth…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High