Priority CRITICAL 100KEV
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-10 · Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority LOW 39
Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02716 · Published 2021-05-22 · No fix listed CWE-78
Priority LOW 39
Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02716 · Published 2021-05-22 · No fix listed CWE-78
Priority LOW 32
Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00325 · Published 2021-05-22 · No fix listed CWE-78
Priority LOW 32
Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00325 · Published 2021-05-22 · No fix listed CWE-78
Priority MEDIUM 53
A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0248 · Published 2020-11-18 · No fix listed CWE-78
Priority LOW 31
A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute arbitrary SQL queries.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.0115 · Published 2019-11-26 · No fix listed CWE-89
Priority LOW 32
A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00518 · Published 2019-11-26 · No fix listed CWE-264
Priority LOW 33
A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00729 · Published 2019-11-26 · No fix listed CWE-20