Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority LOW 39

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02716 Published 2021-05-22 No fix listed CWE-78
Priority LOW 39

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02716 Published 2021-05-22 No fix listed CWE-78
Priority LOW 32

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00325 Published 2021-05-22 No fix listed CWE-78
Priority LOW 32

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00325 Published 2021-05-22 No fix listed CWE-78
Priority MEDIUM 53

A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0248 Published 2020-11-18 No fix listed CWE-78
Priority LOW 31

A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute arbitrary SQL queries.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0115 Published 2019-11-26 No fix listed CWE-89
Priority LOW 32

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00518 Published 2019-11-26 No fix listed CWE-264
Priority LOW 33

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00729 Published 2019-11-26 No fix listed CWE-20