Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

69 records

Priority LOW 25

A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the filesystem.

CVSS 3.1MEDIUM 5.6 Local Low privileges User interaction EPSS 0.00229 Published 2025-02-11 No fix listed CWE-59
TI-2024-13398 CVE-2024-20474 · GHSA-f5rp-4vg3-xcrx

Integer underflow in Cisco Secure Client

Priority LOW 30

A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00623 Published 2024-10-23 No fix listed CWE-191
TI-2023-06945 CVE-2023-20241 · GHSA-23qx-pfmx-49j9

Out-of-bounds read in Cisco Secure Client

Priority LOW 24

Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00197 Published 2023-11-22 No fix listed CWE-125
TI-2023-06944 CVE-2023-20240 · GHSA-qwhq-2jqj-q642

Out-of-bounds read in Cisco Secure Client

Priority LOW 24

Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00197 Published 2023-11-22 No fix listed CWE-125
Priority MEDIUM 44

A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to ele…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05374 Published 2023-06-28 No fix listed CWE-276
Priority LOW 36

A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00242 Published 2021-11-04 No fix listed CWE-266
Priority LOW 32

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affe…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00177 Published 2021-10-06 No fix listed CWE-367
Priority LOW 32

A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00178 Published 2021-06-16 No fix listed CWE-367
Priority LOW 24

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an affected device.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00214 Published 2021-05-06 No fix listed CWE-20
Priority LOW 36

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are use…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00249 Published 2021-05-06 No fix listed CWE-378
Priority LOW 36

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are use…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00249 Published 2021-05-06 No fix listed CWE-378
Priority LOW 37

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are use…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00527 Published 2021-05-06 No fix listed CWE-378
Priority LOW 36

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are use…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00249 Published 2021-05-06 No fix listed CWE-378
Priority LOW 36

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are use…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00234 Published 2021-05-06 No fix listed CWE-378
Priority LOW 36

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are use…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00249 Published 2021-05-06 No fix listed CWE-378
Priority LOW 24

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00231 Published 2021-02-24 No fix listed CWE-20
Priority LOW 39

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01253 Published 2021-02-17 No fix listed CWE-347
Priority LOW 25

A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system (OS) of an a…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00341 Published 2021-01-13 No fix listed CWE-264
Priority LOW 36

A vulnerability in the Network Access Manager and Web Security Agent components of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL injection attack.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00412 Published 2021-01-13 No fix listed CWE-427
Priority LOW 34

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to cause a targeted AnyConnect user to execute a malicious…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00449 Published 2020-11-06 No fix listed CWE-20
Priority LOW 25

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to read arbitrary files on the underlying operating syst…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00333 Published 2020-11-06 No fix listed CWE-749
Priority LOW 31

A vulnerability in the inter-service communication of Cisco AnyConnect Secure Mobility Client for Android could allow an unauthenticated, local attacker to perform a service hijack attack on an affected device or cause a…

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.0036 Published 2020-09-23 No fix listed CWE-345
Priority CRITICAL 93KEV

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10049 Published 2020-08-17 No fix listed CWE-427
Priority LOW 25

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affec…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00455 Published 2020-08-17 No fix listed CWE-20
Load more