VendorsCiscointersight_virtual_applianceall versions
Vulnerabilities

Cisco Intersight

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
Published 2021-12-10 · Analyzed
10.0KEV3 PoCEPSS 1.000
CVE-2021-34748
Cisco Intersight Virtual Appliance Command Injection Vulnerability
Published 2021-10-06 · Modified
9.0EPSS 0.027
CVE-2021-1618
Cisco Intersight Virtual Appliance Vulnerabilities
Published 2021-07-22 · Modified
9.0EPSS 0.027
CVE-2021-1600
Cisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding Vulnerabilities
Published 2021-07-22 · Modified
8.3EPSS 0.004
CVE-2021-1601
Cisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding Vulnerabilities
Published 2021-07-22 · Modified
8.3EPSS 0.004
CVE-2021-1617
Cisco Intersight Virtual Appliance Vulnerabilities
Published 2021-07-22 · Modified
6.5EPSS 0.015
CVE-2023-20237
A vulnerability in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access internal HTTP services that are otherwise inaccessible. This vulnerability is due to insufficient restrictions on internally accessible http proxies. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker access to internal subnets beyond the sphere of their intended access level.
Published 2023-08-16 · Modified
4.3EPSS 0.003