cveboard RSS feed

CVE-2020-26066

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2020
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Cisco SD-WAN vManage Software XML External Entity Vulnerability

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by persuading a user to import a crafted XML file with malicious entries. A successful exploit could allow the attacker to read and write files within the affected application.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco Catalyst SD-WAN Manager

Vendor
Cisco
Product
Cisco Catalyst SD-WAN Manager
Platforms
Unknown
Default status
unknown
Cisco Catalyst SD-WAN Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20.1.12affectedUnavailableUnavailableUnavailableNone listed
19.2.1affectedUnavailableUnavailableUnavailableNone listed
18.4.4affectedUnavailableUnavailableUnavailableNone listed
18.4.5affectedUnavailableUnavailableUnavailableNone listed
20.1.1.1affectedUnavailableUnavailableUnavailableNone listed
20.1.1affectedUnavailableUnavailableUnavailableNone listed
19.3.0affectedUnavailableUnavailableUnavailableNone listed
19.2.2affectedUnavailableUnavailableUnavailableNone listed
19.2.099affectedUnavailableUnavailableUnavailableNone listed
18.3.6affectedUnavailableUnavailableUnavailableNone listed
18.3.7affectedUnavailableUnavailableUnavailableNone listed
19.2.0affectedUnavailableUnavailableUnavailableNone listed
18.3.8affectedUnavailableUnavailableUnavailableNone listed
19.0.0affectedUnavailableUnavailableUnavailableNone listed
19.1.0affectedUnavailableUnavailableUnavailableNone listed
18.4.302affectedUnavailableUnavailableUnavailableNone listed
18.4.303affectedUnavailableUnavailableUnavailableNone listed
19.2.097affectedUnavailableUnavailableUnavailableNone listed
19.2.098affectedUnavailableUnavailableUnavailableNone listed
17.2.10affectedUnavailableUnavailableUnavailableNone listed
18.3.6.1affectedUnavailableUnavailableUnavailableNone listed
19.0.1aaffectedUnavailableUnavailableUnavailableNone listed
18.2.0affectedUnavailableUnavailableUnavailableNone listed
18.4.3affectedUnavailableUnavailableUnavailableNone listed
18.4.1affectedUnavailableUnavailableUnavailableNone listed
17.2.8affectedUnavailableUnavailableUnavailableNone listed
18.3.3.1affectedUnavailableUnavailableUnavailableNone listed
18.4.0affectedUnavailableUnavailableUnavailableNone listed
18.3.1affectedUnavailableUnavailableUnavailableNone listed
17.2.6affectedUnavailableUnavailableUnavailableNone listed
17.2.9affectedUnavailableUnavailableUnavailableNone listed
18.3.4affectedUnavailableUnavailableUnavailableNone listed
17.2.5affectedUnavailableUnavailableUnavailableNone listed
18.3.1.1affectedUnavailableUnavailableUnavailableNone listed
18.3.5affectedUnavailableUnavailableUnavailableNone listed
18.4.0.1affectedUnavailableUnavailableUnavailableNone listed
18.3.3affectedUnavailableUnavailableUnavailableNone listed
17.2.7affectedUnavailableUnavailableUnavailableNone listed
17.2.4affectedUnavailableUnavailableUnavailableNone listed
18.3.0affectedUnavailableUnavailableUnavailableNone listed
19.2.3affectedUnavailableUnavailableUnavailableNone listed
18.4.501_ESaffectedUnavailableUnavailableUnavailableNone listed
20.3.1affectedUnavailableUnavailableUnavailableNone listed
19.2.929affectedUnavailableUnavailableUnavailableNone listed
19.2.31affectedUnavailableUnavailableUnavailableNone listed