Skip to main content

Cx Cloud Agent

4 CVEs product

Monthly

CVE-2022-22965 Apr 01, 23:15 Maven CRITICAL POC KEV PATCH THREAT Act Now

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Java Cisco Code Injection Oracle +42
NVD VulDB HeroDevs
CVSS 3.1
9.8
EPSS
99.7%
CVE-2021-44228 Dec 10, 10:15 Maven CRITICAL POC KEV PATCH THREAT Act Now

Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote code execution through crafted log messages, affecting virtually every Java application on Earth and triggering the largest vulnerability remediation effort in history.

RCE Apache Apple Cisco Debian +149
NVD GitHub Exploit-DB
CVSS 3.1
10.0
EPSS
94.4%
Threat
9.8
CVE-2023-20044 Jan 20, 07:15 HIGH This Week

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Cisco Cx Cloud Agent
NVD
CVSS 3.1
7.3
EPSS
0.1%
CVE-2023-20043 Jan 20, 07:15 MEDIUM This Month

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Cisco Cx Cloud Agent
NVD
CVSS 3.1
6.7
EPSS
0.2%
EPSS 100% CVSS 9.8
CRITICAL POC KEV PATCH THREAT Act Now

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Java Cisco +44
NVD VulDB HeroDevs
EPSS 94% 9.8 CVSS 10.0
CRITICAL POC KEV PATCH THREAT Act Now

Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote code execution through crafted log messages, affecting virtually every Java application on Earth and triggering the largest vulnerability remediation effort in history.

RCE Apache Apple +151
NVD GitHub Exploit-DB
EPSS 0% CVSS 7.3
HIGH This Week

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Cisco Cx Cloud Agent
NVD
EPSS 0% CVSS 6.7
MEDIUM This Month

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Cisco Cx Cloud Agent
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy