Skip to content
OpenAdvisories

Product · Cisco

Cisco Smart Software Manager On-Prem

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2022-20939

    Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability

    A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This vulnerability is due to inadequate protection of sensitive user …

    Cisco Cisco Smart Software Manager On-Prem Network devices
  • Medium 6.5
    CVE-2023-20110 Public exploit

    Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based m…

    Cisco Cisco Smart Software Manager On-Prem Network devices
  • Medium 5.4
    CVE-2021-34766

    Cisco Smart Software Manager Privilege Escalation Vulnerability

    A vulnerability in the web UI of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple functions. This vulnerability is due t…

    Cisco Cisco Smart Software Manager On-Prem Network devices
  • Medium 4.6
    CVE-2021-1218

    Cisco Smart Software Manager Satellite Open Redirect Vulnerability

    A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in…

    Cisco Cisco Smart Software Manager On-Prem Network devices
  • Medium 6.8
    CVE-2021-1222

    Cisco Smart Software Manager Satellite SQL Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management int…

    Cisco Cisco Smart Software Manager On-Prem Network devices
  • Medium 5.3
    CVE-2020-3245

    Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability

    A vulnerability in the web application of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web applicati…

    Cisco Cisco Smart Software Manager On-Prem Network devices