CVE Vulnerability Catalog

A security review in Cisco APIC revealed multiple vulnerabilities related to improper control of a resource through its lifetime (CWE-664). These have been addressed in hardening releases.

A security review in Cisco APIC revealed multiple vulnerabilities related to improper neutralization issues (CWE-707). These have been addressed in hardening releases.

A security review in Cisco APIC revealed multiple vulnerabilities related to improper access control (CWE-284). These have been addressed in hardening releases.

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. Exploitation requires valid administrative credentials. The vulnerability is due to insufficient access control to file system resources.

Vulnerability in VXLAN OAM (NGOAM) feature of Cisco NX-OS allows unauthenticated remote attacker to execute arbitrary code with root privileges or cause DoS. Due to improper input validation when NGOAM is enabled.

Vulnerability in VXLAN OAM (NGOAM) feature of Cisco NX-OS allows unauthenticated remote attacker to execute arbitrary code with root privileges or cause DoS. Due to improper input validation when NGOAM is enabled.

Vulnerability in Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) related to insufficient protection against code injection (CWE-94). Discovered during an internal security review, addressed in software hardening releases.

A security review in Cisco License On-Prem (formerly SSM On-Prem) revealed multiple vulnerabilities related to insufficiently protected credentials (CWE-522). These have been addressed in hardening releases.

A security review in Cisco License On-Prem (formerly SSM On-Prem) revealed multiple vulnerabilities related to improper input verification (CWE-347). These have been addressed in hardening releases.

Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) contains vulnerabilities related to improper authentication, grouped under CWE-306. They were discovered during an internal security review and addressed in a hardening release.

Vulnerability in Cisco networking software related to improper neutralization of special elements (CWE-74). Discovered during an internal security review, addressed in software hardening releases.

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a DoS condition. It is due to insufficient input validation of data sent to the NX-API.

Vulnerability in Cisco networking software related to incorrect calculation issues (CWE-682). Discovered during an internal security review, addressed in a software hardening release.

A vulnerability discovered during Cisco's internal security review concerns insufficient control flow management (CWE-691). It is addressed in a software hardening release. Impact details are not provided in the description.

A vulnerability found during Cisco's internal security review concerns improper input validation (CWE-20). It is addressed in a software hardening release. No impact details are given.

A vulnerability discovered by Cisco's security review concerns improper control of a resource through its lifetime (CWE-664). It is fixed in a software hardening release.

A vulnerability in the MPLS OAM feature of Cisco NX-OS Software for Nexus 3000 and 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a DoS condition. It is due to improper validation of MPLS echo-request packets.

The Cisco networking engineering team discovered vulnerabilities related to buffer management (CWE-119) during an internal security review. They were addressed in a hardening release.

A vulnerability found during Cisco's internal security review concerns improper access control (CWE-284). It is addressed in a software hardening release.

A vulnerability in Cisco NX-OS discovered during internal security review concerns out-of-bounds write (CWE-787). It is fixed in a software hardening release.