Cisco Security Advisories — March 2020 — Cisco Security Advisories — Vulnetix

Try Vulnetix Request Demo

Cisco Security Advisories · March 2020 — Cisco Security Advisories

17 advisories 18 CVEs

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2020-03. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

Back to archive Open Console

Advisories

cisco-sa-20200318-vmanage-cypher-inject

Cisco PSIRTHIGH2020-03-18

Cisco SD-WAN Solution vManage SQL Injection Vulnerability

CVEs:CVE-2019-16012

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-271450	affected	Cisco	—	—

Upstream advisory

cisco-sa-20200318-vmanage-xss

Cisco PSIRTHIGH2020-03-18

Cisco SD-WAN Solution vManage Stored Cross-Site Scripting Vulnerability

CVEs:CVE-2019-16010

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-271450	affected	Cisco	—	—

Upstream advisory

cisco-sa-sdwanbo-QKcABnS2

Cisco PSIRTHIGH2020-03-18

Cisco SD-WAN Solution Buffer Overflow Vulnerability

CVEs:CVE-2020-3264

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-238692	affected	Cisco	—	—

Upstream advisory

cisco-sa-sdwclici-cvrQpH9v

Cisco PSIRTHIGH2020-03-18

Cisco SD-WAN Solution Command Injection Vulnerability

CVEs:CVE-2020-3266

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-238692	affected	Cisco	—	—

Upstream advisory

cisco-sa-sdwpresc-ySJGvE9

Cisco PSIRTHIGH2020-03-18

Cisco SD-WAN Solution Privilege Escalation Vulnerability

CVEs:CVE-2020-3265

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-238692	affected	Cisco	—	—

Upstream advisory

cisco-sa-20200304-webex-player

Cisco PSIRTCRITICAL2020-03-04

Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

CVEs:CVE-2020-3127 CVE-2020-3128

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-100455	affected	Cisco	—	—
CVRFPID-96064	affected	Cisco	—	—

Upstream advisory

cisco-sa-cont-sec-gui-dos-nJ625dXb

Cisco PSIRTHIGH2020-03-04

Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability

CVEs:CVE-2020-3164

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-189789	affected	Cisco	—	—
CVRFPID-189790	affected	Cisco	—	—
CVRFPID-189791	affected	Cisco	—	—

Upstream advisory

cisco-sa-cpnr-csrf-WWTrDkyL

Cisco PSIRTMEDIUM2020-03-04

Cisco Prime Network Registrar Cross-Site Request Forgery Vulnerability

CVEs:CVE-2020-3148

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-195936	affected	Cisco	—	—

Upstream advisory

cisco-sa-esa-resource-exhaust-D7RQAhnD

Cisco PSIRTHIGH2020-03-04

Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability

CVEs:CVE-2020-3181

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-189790	affected	Cisco	—	—

Upstream advisory

cisco-sa-iosxr-ipsec-dos-q8UPX6m

Cisco PSIRTHIGH2020-03-04

Cisco IOS XR Software IPsec Packet Processor Denial of Service Vulnerability

CVEs:CVE-2020-3190

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-5834	affected	Cisco	—	—

Upstream advisory

cisco-sa-ise-xss-BR7nEDjG

Cisco PSIRTHIGH2020-03-04

Cisco Identity Services Engine Cross-Site Scripting Vulnerability

CVEs:CVE-2020-3157

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-111903	affected	Cisco	—	—

Upstream advisory

cisco-sa-prim-collab-disclo-FAnX4DKB

Cisco PSIRTHIGH2020-03-04

Cisco Prime Collaboration Provisioning Information Disclosure Vulnerability

CVEs:CVE-2020-3193

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-209583	affected	Cisco	—	—

Upstream advisory

cisco-sa-prime-collab-xss-RjRCe9n7

Cisco PSIRTHIGH2020-03-04

Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability

CVEs:CVE-2020-3192

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-209583	affected	Cisco	—	—

Upstream advisory

cisco-sa-proximity-ssl-cert-gBBu3RB

Cisco PSIRTHIGH2020-03-04

Cisco Intelligent Proximity SSL Certificate Validation Vulnerability

CVEs:CVE-2020-3155

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-190570	affected	Cisco	—	—
CVRFPID-190702	affected	Cisco	—	—
CVRFPID-192127	affected	Cisco	—	—
CVRFPID-203919	affected	Cisco	—	—
CVRFPID-203922	affected	Cisco	—	—
CVRFPID-210403	affected	Cisco	—	—
CVRFPID-210554	affected	Cisco	—	—
CVRFPID-210568	affected	Cisco	—	—
CVRFPID-221064	affected	Cisco	—	—
CVRFPID-228295	affected	Cisco	—	—
CVRFPID-265365	affected	Cisco	—	—
CVRFPID-276958	affected	Cisco	—	—

Upstream advisory

cisco-sa-rphy-cmdinject-DpEjeTgF

Cisco PSIRTHIGH2020-03-04

Cisco Remote PHY Device Software Command Injection Vulnerability

CVEs:CVE-2020-3176

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-245407	affected	Cisco	—	—

Upstream advisory

cisco-sa-tms-xss-4VXKdLO

Cisco PSIRTHIGH2020-03-04

Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability

CVEs:CVE-2020-3185

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-191859	affected	Cisco	—	—

Upstream advisory

cisco-sa-webex-info-disc-OHqg982

Cisco PSIRTHIGH2020-03-04

Cisco Webex Meetings Client for MacOS Information Disclosure Vulnerability

CVEs:CVE-2020-3182

Affected products

Product	Status	Vendor	Package	Ecosystem
CVRFPID-228295	affected	Cisco	—	—

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console