Cisco SD-WAN vManage Cross-Site Scripting Vulnerability
Priority LOW 28CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.
Summary
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00325 25th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.1; 20.6.1.1; 20.6.0.18.3; 20.6.0.18.4; 20.6.1.0.1; 20.6.2; 20.7.1EFT2; 20.7.1; 20.6.2.1; 20.6.2.2; 20.7.1.1; 20.6.2.2.2; 20.6.2.2.3; 20.6.2.0.4; 20.6.2.2.7; 20.6.3; 20.7.1.0.2; 20.8.1; 20.6.3.0.7; 20.6.3.0.5; 20.6.3.0.10; 20.6.3.0.2; 20.7.2; 20.6.3.0.11; 20.6.3.0.14; 20.6.3.0.19; 20.6.3.0.18; 20.6.3.0.23; 20.6.3.0.25; 20.6.3.0.27; 20.6.3.0.29; 20.10.1; 20.6.3.0.33; 20.9.1_LI_Images; 20.10.1_LI_Images; 20.9.3; 20.6.5.1; 20.11.1; 20.11.1_LI_Images; 20.9.3_LI_ Images; 20.6.3.1.1; 20.9.3.0.3; 20.6.3.2; 20.6.4.1; 20.6.3.0.39; 20.6.5.2; 20.10.1.1; 20.6.2.2.4; 20.6.1.2; 20.11.1.1; 20.6.3.0.40; 20.9.2.2; 20.6.5.2.3; 20.6.5.1.5; 20.9.3.0.4; 20.6.4.0.19; 20.6.3.3; 20.6.5.4; 20.6.5.1.7; 20.9.3.0.12; 20.11.1.2; 20.6.3.4; 20.10.1.2; 20.6.5.1.10; 20.6.5.2.4; 20.9.3.0.18; 20.6.3.0.47; 20.9.2.3; 20.9.3.0.21; 20.9.4_LI_Images; 20.9.4; 20.6.5.1.11; 20.12.1; 20.12.1_LI_Images; 20.9.3.0.23; 20.9.4.1; 20.9.4.1_LI_Images; 20.9.3.0.25; 20.9.3.0.24; 20.6.5.1.14; 20.9.3.0.26; 20.6.3.0.51; 20.12.2; 20.12.2_LI_Images; 20.6.6.0.1; 20.13.1_LI_Images; 20.9.4.0.4; 20.13.1; 20.9.4.1.1; 20.9.5; 20.9.5_LI_Images; 20.12.3_LI_Images; 20.12.3; 20.9.4.1.3; 20.6.7; 20.9.5.1; 20.9.5.1_LI_Images; 20.14.1; 20.14.1_LI_Images; 20.9.5.2_LI_Images; 20.12.3.1; 20.12.4 | — | No fix listed | CNA |
- Cisco Catalyst SD-WAN Manager VendorCisco Affected 20.6.1; 20.6.1.1; 20.6.0.18.3; 20.6.0.18.4; 20.6.1.0.1; 20.6.2; 20.7.1EFT2; 20.7.1; 20.6.2.1; 20.6.2.2; 20.7.1.1; 20.6.2.2.2; 20.6.2.2.3; 20.6.2.0.4; 20.6.2.2.7; 20.6.3; 20.7.1.0.2; 20.8.1; 20.6.3.0.7; 20.6.3.0.5; 20.6.3.0.10; 20.6.3.0.2; 20.7.2; 20.6.3.0.11; 20.6.3.0.14; 20.6.3.0.19; 20.6.3.0.18; 20.6.3.0.23; 20.6.3.0.25; 20.6.3.0.27; 20.6.3.0.29; 20.10.1; 20.6.3.0.33; 20.9.1_LI_Images; 20.10.1_LI_Images; 20.9.3; 20.6.5.1; 20.11.1; 20.11.1_LI_Images; 20.9.3_LI_ Images; 20.6.3.1.1; 20.9.3.0.3; 20.6.3.2; 20.6.4.1; 20.6.3.0.39; 20.6.5.2; 20.10.1.1; 20.6.2.2.4; 20.6.1.2; 20.11.1.1; 20.6.3.0.40; 20.9.2.2; 20.6.5.2.3; 20.6.5.1.5; 20.9.3.0.4; 20.6.4.0.19; 20.6.3.3; 20.6.5.4; 20.6.5.1.7; 20.9.3.0.12; 20.11.1.2; 20.6.3.4; 20.10.1.2; 20.6.5.1.10; 20.6.5.2.4; 20.9.3.0.18; 20.6.3.0.47; 20.9.2.3; 20.9.3.0.21; 20.9.4_LI_Images; 20.9.4; 20.6.5.1.11; 20.12.1; 20.12.1_LI_Images; 20.9.3.0.23; 20.9.4.1; 20.9.4.1_LI_Images; 20.9.3.0.25; 20.9.3.0.24; 20.6.5.1.14; 20.9.3.0.26; 20.6.3.0.51; 20.12.2; 20.12.2_LI_Images; 20.6.6.0.1; 20.13.1_LI_Images; 20.9.4.0.4; 20.13.1; 20.9.4.1.1; 20.9.5; 20.9.5_LI_Images; 20.12.3_LI_Images; 20.12.3; 20.9.4.1.3; 20.6.7; 20.9.5.1; 20.9.5.1_LI_Images; 20.14.1; 20.14.1_LI_Images; 20.9.5.2_LI_Images; 20.12.3.1; 20.12.4 Fixed in — No fix listed CNA
CPE configurations NVD · 102
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.0.18.3:*:*:*:*:*:*:* | 20.6.0.18.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.0.18.4:*:*:*:*:*:*:* | 20.6.0.18.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.1:*:*:*:*:*:*:* | 20.6.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.1.0.1:*:*:*:*:*:*:* | 20.6.1.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.1.1:*:*:*:*:*:*:* | 20.6.1.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.1.2:*:*:*:*:*:*:* | 20.6.1.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2:*:*:*:*:*:*:* | 20.6.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.0.4:*:*:*:*:*:*:* | 20.6.2.0.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.1:*:*:*:*:*:*:* | 20.6.2.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.2:*:*:*:*:*:*:* | 20.6.2.2 | Vulnerable | Cisco |
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.0.18.3:*:*:*:*:*:*:* Versions 20.6.0.18.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.0.18.4:*:*:*:*:*:*:* Versions 20.6.0.18.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.1:*:*:*:*:*:*:* Versions 20.6.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.1.0.1:*:*:*:*:*:*:* Versions 20.6.1.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.1.1:*:*:*:*:*:*:* Versions 20.6.1.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.1.2:*:*:*:*:*:*:* Versions 20.6.1.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2:*:*:*:*:*:*:* Versions 20.6.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.0.4:*:*:*:*:*:*:* Versions 20.6.2.0.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.1:*:*:*:*:*:*:* Versions 20.6.2.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.2:*:*:*:*:*:*:* Versions 20.6.2.2 Vulnerable ·Cisco
Show 92 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.2.2:*:*:*:*:*:*:* | 20.6.2.2.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.2.3:*:*:*:*:*:*:* | 20.6.2.2.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.2.4:*:*:*:*:*:*:* | 20.6.2.2.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.2.7:*:*:*:*:*:*:* | 20.6.2.2.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3:*:*:*:*:*:*:* | 20.6.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.2:*:*:*:*:*:*:* | 20.6.3.0.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.5:*:*:*:*:*:*:* | 20.6.3.0.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.7:*:*:*:*:*:*:* | 20.6.3.0.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.10:*:*:*:*:*:*:* | 20.6.3.0.10 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.11:*:*:*:*:*:*:* | 20.6.3.0.11 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.14:*:*:*:*:*:*:* | 20.6.3.0.14 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.18:*:*:*:*:*:*:* | 20.6.3.0.18 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.19:*:*:*:*:*:*:* | 20.6.3.0.19 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.23:*:*:*:*:*:*:* | 20.6.3.0.23 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.25:*:*:*:*:*:*:* | 20.6.3.0.25 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.27:*:*:*:*:*:*:* | 20.6.3.0.27 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.29:*:*:*:*:*:*:* | 20.6.3.0.29 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.33:*:*:*:*:*:*:* | 20.6.3.0.33 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.39:*:*:*:*:*:*:* | 20.6.3.0.39 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.40:*:*:*:*:*:*:* | 20.6.3.0.40 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.47:*:*:*:*:*:*:* | 20.6.3.0.47 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.51:*:*:*:*:*:*:* | 20.6.3.0.51 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.1.1:*:*:*:*:*:*:* | 20.6.3.1.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.2:*:*:*:*:*:*:* | 20.6.3.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.3:*:*:*:*:*:*:* | 20.6.3.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.4:*:*:*:*:*:*:* | 20.6.3.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.4.0.19:*:*:*:*:*:*:* | 20.6.4.0.19 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.4.1:*:*:*:*:*:*:* | 20.6.4.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1:*:*:*:*:*:*:* | 20.6.5.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1.5:*:*:*:*:*:*:* | 20.6.5.1.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1.7:*:*:*:*:*:*:* | 20.6.5.1.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1.10:*:*:*:*:*:*:* | 20.6.5.1.10 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1.11:*:*:*:*:*:*:* | 20.6.5.1.11 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1.14:*:*:*:*:*:*:* | 20.6.5.1.14 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.2:*:*:*:*:*:*:* | 20.6.5.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.2.3:*:*:*:*:*:*:* | 20.6.5.2.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.2.4:*:*:*:*:*:*:* | 20.6.5.2.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.4:*:*:*:*:*:*:* | 20.6.5.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.6.0.1:*:*:*:*:*:*:* | 20.6.6.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.7:*:*:*:*:*:*:* | 20.6.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7.1:*:*:*:*:*:*:* | 20.7.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7.1.0.2:*:*:*:*:*:*:* | 20.7.1.0.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7.1.1:*:*:*:*:*:*:* | 20.7.1.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7.1eft2:*:*:*:*:*:*:* | 20.7.1eft2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7.2:*:*:*:*:*:*:* | 20.7.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.8.1:*:*:*:*:*:*:* | 20.8.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.1_li_images:*:*:*:*:*:*:* | 20.9.1_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.2.2:*:*:*:*:*:*:* | 20.9.2.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.2.3:*:*:*:*:*:*:* | 20.9.2.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3:*:*:*:*:*:*:* | 20.9.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.3:*:*:*:*:*:*:* | 20.9.3.0.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.4:*:*:*:*:*:*:* | 20.9.3.0.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.12:*:*:*:*:*:*:* | 20.9.3.0.12 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.18:*:*:*:*:*:*:* | 20.9.3.0.18 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.21:*:*:*:*:*:*:* | 20.9.3.0.21 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.23:*:*:*:*:*:*:* | 20.9.3.0.23 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.24:*:*:*:*:*:*:* | 20.9.3.0.24 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.25:*:*:*:*:*:*:* | 20.9.3.0.25 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.26:*:*:*:*:*:*:* | 20.9.3.0.26 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3_li_images:*:*:*:*:*:*:* | 20.9.3_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4:*:*:*:*:*:*:* | 20.9.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4.0.4:*:*:*:*:*:*:* | 20.9.4.0.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4.1:*:*:*:*:*:*:* | 20.9.4.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4.1.1:*:*:*:*:*:*:* | 20.9.4.1.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4.1.3:*:*:*:*:*:*:* | 20.9.4.1.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4.1_li_images:*:*:*:*:*:*:* | 20.9.4.1_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4_li_images:*:*:*:*:*:*:* | 20.9.4_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.5:*:*:*:*:*:*:* | 20.9.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.5.1:*:*:*:*:*:*:* | 20.9.5.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.5.1_li_images:*:*:*:*:*:*:* | 20.9.5.1_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.5.2_li_images:*:*:*:*:*:*:* | 20.9.5.2_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.5_li_images:*:*:*:*:*:*:* | 20.9.5_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.10.1:*:*:*:*:*:*:* | 20.10.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.10.1.1:*:*:*:*:*:*:* | 20.10.1.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.10.1.2:*:*:*:*:*:*:* | 20.10.1.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.10.1_li_images:*:*:*:*:*:*:* | 20.10.1_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.11.1:*:*:*:*:*:*:* | 20.11.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.11.1.1:*:*:*:*:*:*:* | 20.11.1.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.11.1.2:*:*:*:*:*:*:* | 20.11.1.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.11.1_li_images:*:*:*:*:*:*:* | 20.11.1_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.1:*:*:*:*:*:*:* | 20.12.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.1_li_images:*:*:*:*:*:*:* | 20.12.1_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.2:*:*:*:*:*:*:* | 20.12.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.2_li_images:*:*:*:*:*:*:* | 20.12.2_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.3:*:*:*:*:*:*:* | 20.12.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.3.1:*:*:*:*:*:*:* | 20.12.3.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.3_li_images:*:*:*:*:*:*:* | 20.12.3_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.4:*:*:*:*:*:*:* | 20.12.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.13.1:*:*:*:*:*:*:* | 20.13.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.13.1_li_images:*:*:*:*:*:*:* | 20.13.1_li_images | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.14.1:*:*:*:*:*:*:* | 20.14.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.14.1_li_images:*:*:*:*:*:*:* | 20.14.1_li_images | Vulnerable | Cisco |
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.2.2:*:*:*:*:*:*:* Versions 20.6.2.2.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.2.3:*:*:*:*:*:*:* Versions 20.6.2.2.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.2.4:*:*:*:*:*:*:* Versions 20.6.2.2.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.2.2.7:*:*:*:*:*:*:* Versions 20.6.2.2.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3:*:*:*:*:*:*:* Versions 20.6.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.2:*:*:*:*:*:*:* Versions 20.6.3.0.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.5:*:*:*:*:*:*:* Versions 20.6.3.0.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.7:*:*:*:*:*:*:* Versions 20.6.3.0.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.10:*:*:*:*:*:*:* Versions 20.6.3.0.10 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.11:*:*:*:*:*:*:* Versions 20.6.3.0.11 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.14:*:*:*:*:*:*:* Versions 20.6.3.0.14 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.18:*:*:*:*:*:*:* Versions 20.6.3.0.18 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.19:*:*:*:*:*:*:* Versions 20.6.3.0.19 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.23:*:*:*:*:*:*:* Versions 20.6.3.0.23 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.25:*:*:*:*:*:*:* Versions 20.6.3.0.25 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.27:*:*:*:*:*:*:* Versions 20.6.3.0.27 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.29:*:*:*:*:*:*:* Versions 20.6.3.0.29 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.33:*:*:*:*:*:*:* Versions 20.6.3.0.33 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.39:*:*:*:*:*:*:* Versions 20.6.3.0.39 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.40:*:*:*:*:*:*:* Versions 20.6.3.0.40 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.47:*:*:*:*:*:*:* Versions 20.6.3.0.47 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.0.51:*:*:*:*:*:*:* Versions 20.6.3.0.51 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.1.1:*:*:*:*:*:*:* Versions 20.6.3.1.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.2:*:*:*:*:*:*:* Versions 20.6.3.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.3:*:*:*:*:*:*:* Versions 20.6.3.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.3.4:*:*:*:*:*:*:* Versions 20.6.3.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.4.0.19:*:*:*:*:*:*:* Versions 20.6.4.0.19 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.4.1:*:*:*:*:*:*:* Versions 20.6.4.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1:*:*:*:*:*:*:* Versions 20.6.5.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1.5:*:*:*:*:*:*:* Versions 20.6.5.1.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1.7:*:*:*:*:*:*:* Versions 20.6.5.1.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1.10:*:*:*:*:*:*:* Versions 20.6.5.1.10 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1.11:*:*:*:*:*:*:* Versions 20.6.5.1.11 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.1.14:*:*:*:*:*:*:* Versions 20.6.5.1.14 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.2:*:*:*:*:*:*:* Versions 20.6.5.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.2.3:*:*:*:*:*:*:* Versions 20.6.5.2.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.2.4:*:*:*:*:*:*:* Versions 20.6.5.2.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.5.4:*:*:*:*:*:*:* Versions 20.6.5.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.6.0.1:*:*:*:*:*:*:* Versions 20.6.6.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.6.7:*:*:*:*:*:*:* Versions 20.6.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7.1:*:*:*:*:*:*:* Versions 20.7.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7.1.0.2:*:*:*:*:*:*:* Versions 20.7.1.0.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7.1.1:*:*:*:*:*:*:* Versions 20.7.1.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7.1eft2:*:*:*:*:*:*:* Versions 20.7.1eft2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7.2:*:*:*:*:*:*:* Versions 20.7.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.8.1:*:*:*:*:*:*:* Versions 20.8.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.1_li_images:*:*:*:*:*:*:* Versions 20.9.1_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.2.2:*:*:*:*:*:*:* Versions 20.9.2.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.2.3:*:*:*:*:*:*:* Versions 20.9.2.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3:*:*:*:*:*:*:* Versions 20.9.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.3:*:*:*:*:*:*:* Versions 20.9.3.0.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.4:*:*:*:*:*:*:* Versions 20.9.3.0.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.12:*:*:*:*:*:*:* Versions 20.9.3.0.12 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.18:*:*:*:*:*:*:* Versions 20.9.3.0.18 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.21:*:*:*:*:*:*:* Versions 20.9.3.0.21 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.23:*:*:*:*:*:*:* Versions 20.9.3.0.23 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.24:*:*:*:*:*:*:* Versions 20.9.3.0.24 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.25:*:*:*:*:*:*:* Versions 20.9.3.0.25 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3.0.26:*:*:*:*:*:*:* Versions 20.9.3.0.26 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.3_li_images:*:*:*:*:*:*:* Versions 20.9.3_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4:*:*:*:*:*:*:* Versions 20.9.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4.0.4:*:*:*:*:*:*:* Versions 20.9.4.0.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4.1:*:*:*:*:*:*:* Versions 20.9.4.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4.1.1:*:*:*:*:*:*:* Versions 20.9.4.1.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4.1.3:*:*:*:*:*:*:* Versions 20.9.4.1.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4.1_li_images:*:*:*:*:*:*:* Versions 20.9.4.1_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.4_li_images:*:*:*:*:*:*:* Versions 20.9.4_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.5:*:*:*:*:*:*:* Versions 20.9.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.5.1:*:*:*:*:*:*:* Versions 20.9.5.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.5.1_li_images:*:*:*:*:*:*:* Versions 20.9.5.1_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.5.2_li_images:*:*:*:*:*:*:* Versions 20.9.5.2_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9.5_li_images:*:*:*:*:*:*:* Versions 20.9.5_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.10.1:*:*:*:*:*:*:* Versions 20.10.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.10.1.1:*:*:*:*:*:*:* Versions 20.10.1.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.10.1.2:*:*:*:*:*:*:* Versions 20.10.1.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.10.1_li_images:*:*:*:*:*:*:* Versions 20.10.1_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.11.1:*:*:*:*:*:*:* Versions 20.11.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.11.1.1:*:*:*:*:*:*:* Versions 20.11.1.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.11.1.2:*:*:*:*:*:*:* Versions 20.11.1.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.11.1_li_images:*:*:*:*:*:*:* Versions 20.11.1_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.1:*:*:*:*:*:*:* Versions 20.12.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.1_li_images:*:*:*:*:*:*:* Versions 20.12.1_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.2:*:*:*:*:*:*:* Versions 20.12.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.2_li_images:*:*:*:*:*:*:* Versions 20.12.2_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.3:*:*:*:*:*:*:* Versions 20.12.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.3.1:*:*:*:*:*:*:* Versions 20.12.3.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.3_li_images:*:*:*:*:*:*:* Versions 20.12.3_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.4:*:*:*:*:*:*:* Versions 20.12.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.13.1:*:*:*:*:*:*:* Versions 20.13.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.13.1_li_images:*:*:*:*:*:*:* Versions 20.13.1_li_images Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.14.1:*:*:*:*:*:*:* Versions 20.14.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.14.1_li_images:*:*:*:*:*:*:* Versions 20.14.1_li_images Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-20475
- 2026-10-03 Alias added: GHSA-fc2q-mrvj-fwmp
References
Advisory 1
More Cisco Catalyst Sd-wan Manager vulnerabilities
- TI-2026-53490 Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2026-16388 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 10.0
- TI-2026-16340 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 10.0
- TI-2026-16436 Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability KEVCVSS 3.1HIGH 7.8
- TI-2022-05334 Cisco SD-WAN Software Privilege Escalation Vulnerability KEVCVSS 3.1HIGH 7.8
- TI-2026-16341 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability KEVCVSS 3.1HIGH 7.5
Sources
- CVE-2024-20475 · CVE Program
- CVE-2024-20475 · NVD
- FIRST EPSS
- GHSA-fc2q-mrvj-fwmp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences