Cisco Secure Network Analytics
Recent Cisco Secure Network Analytics Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 2023-04-05 | Cisco Secure Network Analytics Remote Code Execution Vulnerability | April 5, 2023 |
| 2023-04-05 | Cisco Secure Network Analytics Remote Code Execution Vulnerability | April 5, 2023 |
| 2022-05-18 | Cisco Secure Network Analytics Remote Code Execution Vulnerability | May 18, 2022 |
| 2022-04-06 | Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability | April 6, 2022 |
| 2022-01-12 | Cisco Secure Network Analytics Cross-Site Scripting Vulnerability | January 12, 2022 |
By the Year
In 2024 there have been 0 vulnerabilities in Cisco Secure Network Analytics . Last year Secure Network Analytics had 2 security vulnerabilities published. Right now, Secure Network Analytics is on track to have less security vulnerabilities in 2024 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 2 | 8.00 |
| 2022 | 2 | 7.25 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Secure Network Analytics vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Cisco Secure Network Analytics Security Vulnerabilities
A vulnerability in Cisco Secure Network Analytics could
CVE-2023-20103
7.2 - High
- April 05, 2023
A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device. This vulnerability is due to insufficient validation of user input to the web interface. An attacker could exploit this vulnerability by uploading a crafted file to an affected device. A successful exploit could allow the attacker to execute code on the affected device. To exploit this vulnerability, an attacker would need to have valid Administrator credentials on the affected device.
Improper Input Validation
A vulnerability in the web-based management interface of Cisco Secure Network Analytics could
CVE-2023-20102
8.8 - High
- April 05, 2023
A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to insufficient sanitization of user-provided data that is parsed into system memory. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the administrator user.
Marshaling, Unmarshaling
A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, could
CVE-2022-20797
9.1 - Critical
- May 27, 2022
A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, could allow an authenticated, remote attacker to execute arbitrary commands as an administrator on the underlying operating system. This vulnerability is due to insufficient user input validation by the web-based management interface of the affected software. An attacker could exploit this vulnerability by injecting arbitrary commands in the web-based management interface. A successful exploit could allow the attacker to make configuration changes on the affected device or cause certain services to restart unexpectedly.
Shell injection
A vulnerability in the web-based management interface of the Network Diagrams application for Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could
CVE-2022-20741
5.4 - Medium
- April 06, 2022
A vulnerability in the web-based management interface of the Network Diagrams application for Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Cisco Secure Network Analytics or by Cisco? Click the Watch button to subscribe.
