Cisco Umbrella
12 CVEs affecting Cisco Umbrella. Latest disclosed: 2022-11-04. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0435 | Critical | 9.1 | 2018-10-05 | A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizatio… |
CVE-2019-1807 | High | 7.6 | 2019-05-03 | A vulnerability in the session management functionality of the web UI for the Cisco Umbrella Dashboard could allow an authenticated, remote attacker to access… |
CVE-2022-20773 | High | 7.5 | 2022-04-21 | A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an unauthenticated, remote attacker to imper… |
CVE-2021-1475 | Medium | 6.5 | 2021-04-08 | Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to… |
CVE-2021-1474 | Medium | 6.5 | 2021-04-08 | Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to… |
CVE-2017-6679 | Medium | 6.4 | 2017-12-01 | The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the cust… |
CVE-2020-3337 | Medium | 6.1 | 2020-06-18 | A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerabil… |
CVE-2019-1792 | Medium | 6.1 | 2019-04-18 | A vulnerability in the URL block page of Cisco Umbrella could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against… |
CVE-2021-1350 | Medium | 5.3 | 2021-01-20 | A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulne… |
CVE-2022-20969 | Medium | 4.8 | 2022-11-04 | A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… |
CVE-2021-40126 | Medium | 4.3 | 2021-11-04 | A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the U… |
CVE-2020-3246 | Medium | 4.3 | 2020-05-06 | A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to perform a carriage return line feed (CRLF) injection att… |