cveboard RSS feed

CVE-2020-26064

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2020
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by persuading a user to import a crafted XML file with malicious entries. A successful exploit could allow the attacker to read and write files within the affected application.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco SD-WAN vManage

Vendor
Cisco
Product
Cisco SD-WAN vManage
Platforms
Unknown
Default status
Unknown
Cisco SD-WAN vManage · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
17.2.6affectedUnavailableUnavailableUnavailableNone listed
17.2.7affectedUnavailableUnavailableUnavailableNone listed
17.2.8affectedUnavailableUnavailableUnavailableNone listed
17.2.9affectedUnavailableUnavailableUnavailableNone listed
17.2.10affectedUnavailableUnavailableUnavailableNone listed
17.2.4affectedUnavailableUnavailableUnavailableNone listed
17.2.5affectedUnavailableUnavailableUnavailableNone listed
18.3.1.1affectedUnavailableUnavailableUnavailableNone listed
18.3.3.1affectedUnavailableUnavailableUnavailableNone listed
18.3.3affectedUnavailableUnavailableUnavailableNone listed
18.3.4affectedUnavailableUnavailableUnavailableNone listed
18.3.5affectedUnavailableUnavailableUnavailableNone listed
18.3.7affectedUnavailableUnavailableUnavailableNone listed
18.3.8affectedUnavailableUnavailableUnavailableNone listed
18.3.6.1affectedUnavailableUnavailableUnavailableNone listed
18.3.1affectedUnavailableUnavailableUnavailableNone listed
18.3.0affectedUnavailableUnavailableUnavailableNone listed
18.4.0.1affectedUnavailableUnavailableUnavailableNone listed
18.4.3affectedUnavailableUnavailableUnavailableNone listed
18.4.302affectedUnavailableUnavailableUnavailableNone listed
18.4.303affectedUnavailableUnavailableUnavailableNone listed
18.4.4affectedUnavailableUnavailableUnavailableNone listed
18.4.5affectedUnavailableUnavailableUnavailableNone listed
18.4.0affectedUnavailableUnavailableUnavailableNone listed
18.4.1affectedUnavailableUnavailableUnavailableNone listed
19.2.0affectedUnavailableUnavailableUnavailableNone listed
19.2.097affectedUnavailableUnavailableUnavailableNone listed
19.2.099affectedUnavailableUnavailableUnavailableNone listed
19.2.1affectedUnavailableUnavailableUnavailableNone listed
19.2.2affectedUnavailableUnavailableUnavailableNone listed
19.2.3affectedUnavailableUnavailableUnavailableNone listed
19.2.31affectedUnavailableUnavailableUnavailableNone listed
19.2.929affectedUnavailableUnavailableUnavailableNone listed
20.1.1.1affectedUnavailableUnavailableUnavailableNone listed
20.1.12affectedUnavailableUnavailableUnavailableNone listed
20.1.1affectedUnavailableUnavailableUnavailableNone listed
19.3.0affectedUnavailableUnavailableUnavailableNone listed
19.1.0affectedUnavailableUnavailableUnavailableNone listed
18.2.0affectedUnavailableUnavailableUnavailableNone listed
20.3.1affectedUnavailableUnavailableUnavailableNone listed