cisco-sa-iosxr-redis-ABJyE5xK
Cisco PSIRTExploitedHIGH2022-05-20
Cisco IOS XR Software Health Check Open Port Vulnerability
CVEs:CVE-2022-20821
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-5834 | affected | Cisco | — | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
Cisco IOS XR Software Health Check Open Port Vulnerability
CVEs:CVE-2022-20821
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-5834 | affected | Cisco | — | — |
Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability
CVEs:CVE-2022-20765
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-197112 | affected | Cisco | — | — |
Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities
CVEs:CVE-2022-20674CVE-2022-20667CVE-2022-20669CVE-2022-20670CVE-2022-20673CVE-2022-20671CVE-2022-20668CVE-2022-20672CVE-2022-20666
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-257214 | affected | Cisco | — | — |
Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability
CVEs:CVE-2022-20802
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-256410 | affected | Cisco | — | — |
Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
CVEs:CVE-2022-20809CVE-2022-20806CVE-2022-20807
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-209614 | affected | Cisco | — | — |
Cisco Secure Network Analytics Remote Code Execution Vulnerability
CVEs:CVE-2022-20797
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-245631 | affected | Cisco | — | — |
| CVRFPID-285963 | affected | Cisco | — | — |
Cisco Enterprise NFV Infrastructure Software Vulnerabilities
CVEs:CVE-2022-20777CVE-2022-20779CVE-2022-20780
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-235874 | affected | Cisco | — | — |
Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities
CVEs:CVE-2022-20794CVE-2022-20764
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-265966 | affected | Cisco | — | — |
| CVRFPID-278404 | affected | Cisco | — | — |
ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022
CVEs:CVE-2022-20771
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-221075 | affected | Cisco | — | — |
ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: May 2022
CVEs:CVE-2022-20770
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-221075 | affected | Cisco | — | — |
ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: May 2022
CVEs:CVE-2022-20796
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-221075 | affected | Cisco | — | — |
ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: May 2022
CVEs:CVE-2022-20785
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-221075 | affected | Cisco | — | — |
Cisco Small Business RV Series Routers Remote Code Execution Vulnerability
CVEs:CVE-2022-20753
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-183630 | affected | Cisco | — | — |
Cisco Small Business RV Series Routers Command Injection Vulnerabilities
CVEs:CVE-2022-20799CVE-2022-20801
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-183630 | affected | Cisco | — | — |
Cisco SD-WAN vManage Software Information Disclosure Vulnerability
CVEs:CVE-2022-20734
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-271450 | affected | Cisco | — | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.