# Vulnerabilities published in 2018


- [CVE-2018-15422](https://insights.sbomify.com/CVE-2018-15422/): Cisco Webex Network Recording Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15421](https://insights.sbomify.com/CVE-2018-15421/): Cisco Webex Network Recording Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15420](https://insights.sbomify.com/CVE-2018-15420/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-1542](https://insights.sbomify.com/CVE-2018-1542/): XML external entity in FileNet P8 Platform (high 7.1)
- [CVE-2018-15419](https://insights.sbomify.com/CVE-2018-15419/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15418](https://insights.sbomify.com/CVE-2018-15418/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15417](https://insights.sbomify.com/CVE-2018-15417/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15416](https://insights.sbomify.com/CVE-2018-15416/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15415](https://insights.sbomify.com/CVE-2018-15415/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15414](https://insights.sbomify.com/CVE-2018-15414/): Cisco Webex Network Recording Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15413](https://insights.sbomify.com/CVE-2018-15413/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15412](https://insights.sbomify.com/CVE-2018-15412/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15411](https://insights.sbomify.com/CVE-2018-15411/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15410](https://insights.sbomify.com/CVE-2018-15410/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-1541](https://insights.sbomify.com/CVE-2018-1541/): Cross-site scripting in WebSphere Commerce Enterprise (medium 5.4)
- [CVE-2018-15409](https://insights.sbomify.com/CVE-2018-15409/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15408](https://insights.sbomify.com/CVE-2018-15408/): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (high 7.8)
- [CVE-2018-15407](https://insights.sbomify.com/CVE-2018-15407/): Cisco HyperFlex World-Readable Sensitive Information Vulnerability (medium 5.5)
- [CVE-2018-15406](https://insights.sbomify.com/CVE-2018-15406/): Cisco UCS Director Stored Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2018-15405](https://insights.sbomify.com/CVE-2018-15405/): Missing authorization in Cisco Unified Computing System Director (medium 6.5)
- [CVE-2018-15404](https://insights.sbomify.com/CVE-2018-15404/): Denial of service in Cisco Unified Computing System Director (medium 6.5)
- [CVE-2018-15403](https://insights.sbomify.com/CVE-2018-15403/): Multiple Cisco Unified Communications Products Open Redirect Vulnerability (medium 5.4)
- [CVE-2018-15402](https://insights.sbomify.com/CVE-2018-15402/): Cisco Enterprise NFV Infrastructure Software Cross-Site Request Forgery Vulnerability (medium 5.4)
- [CVE-2018-15401](https://insights.sbomify.com/CVE-2018-15401/): Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability (medium 6.5)
- [CVE-2018-15400](https://insights.sbomify.com/CVE-2018-15400/): Cisco Cloud Services Platform 2100 Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2018-15399](https://insights.sbomify.com/CVE-2018-15399/): Cisco Adaptive Security Appliance TCP Syslog Denial of Service Vulnerability (medium 6.8)
- [CVE-2018-15398](https://insights.sbomify.com/CVE-2018-15398/): Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability (medium 4.0)
- [CVE-2018-15397](https://insights.sbomify.com/CVE-2018-15397/): Cisco Adaptive Security Appliance IPsec VPN Denial of Service Vulnerability (medium 6.8)
- [CVE-2018-15396](https://insights.sbomify.com/CVE-2018-15396/): Cisco Unity Connection File Upload Denial of Service Vulnerability (medium 6.8)
- [CVE-2018-15395](https://insights.sbomify.com/CVE-2018-15395/): Cisco Wireless LAN Controller Software Privilege Escalation Vulnerability (medium 5.4)
- [CVE-2018-15394](https://insights.sbomify.com/CVE-2018-15394/): Cisco Stealthwatch Management Console Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2018-15393](https://insights.sbomify.com/CVE-2018-15393/): Cisco Content Security Management Appliance (SMA) Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2018-15392](https://insights.sbomify.com/CVE-2018-15392/): Cisco Industrial Network Director DHCP Request Processing Denial of Service Vulnerability (medium 4.3)
- [CVE-2018-15391](https://insights.sbomify.com/CVE-2018-15391/): Cisco Remote PHY IPv4 Fragment Denial of Service Vulnerability (high 7.5)
- [CVE-2018-15390](https://insights.sbomify.com/CVE-2018-15390/): Cisco Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability (medium 6.8)
- [CVE-2018-1539](https://insights.sbomify.com/CVE-2018-1539/): Auth bypass in Rational Engineering Lifecycle Manager (medium 5.4)
- [CVE-2018-15389](https://insights.sbomify.com/CVE-2018-15389/): Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability (critical 9.8)
- [CVE-2018-15388](https://insights.sbomify.com/CVE-2018-15388/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability (high 8.6)
- [CVE-2018-15387](https://insights.sbomify.com/CVE-2018-15387/): Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability (critical 9.8)
- [CVE-2018-15386](https://insights.sbomify.com/CVE-2018-15386/): Cisco Digital Network Architecture Center Unauthenticated Access Vulnerability (critical 9.8)
- [CVE-2018-15383](https://insights.sbomify.com/CVE-2018-15383/): Cisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability (high 7.5)
- [CVE-2018-15382](https://insights.sbomify.com/CVE-2018-15382/): Cisco HyperFlex Software Static Signing Key Vulnerability (high 8.6)
- [CVE-2018-15381](https://insights.sbomify.com/CVE-2018-15381/): Cisco Unity Express Arbitrary Command Execution Vulnerability (critical 9.8)
- [CVE-2018-15380](https://insights.sbomify.com/CVE-2018-15380/): Cisco HyperFlex Software Command Injection Vulnerability (high 8.8)
- [CVE-2018-15379](https://insights.sbomify.com/CVE-2018-15379/): Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability (critical 9.8)
- [CVE-2018-15378](https://insights.sbomify.com/CVE-2018-15378/): Clam AntiVirus unmew11() Denial of Service Vulnerability (medium 5.5)
- [CVE-2018-15377](https://insights.sbomify.com/CVE-2018-15377/): Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak Vulnerability (high 8.6)
- [CVE-2018-15376](https://insights.sbomify.com/CVE-2018-15376/): Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities (medium 6.7)
- [CVE-2018-15375](https://insights.sbomify.com/CVE-2018-15375/): Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities (medium 6.7)
- [CVE-2018-15374](https://insights.sbomify.com/CVE-2018-15374/): Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability (medium 6.7)
- [CVE-2018-15373](https://insights.sbomify.com/CVE-2018-15373/): Cisco IOS and IOS XE Software Cisco Discovery Protocol Denial of Service Vulnerability (high 7.4)
- [CVE-2018-15372](https://insights.sbomify.com/CVE-2018-15372/): Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass Vulnerability (high 8.1)
- [CVE-2018-15371](https://insights.sbomify.com/CVE-2018-15371/): Cisco IOS XE Software Shell Access Authentication Bypass Vulnerability (medium 6.7)
- [CVE-2018-15370](https://insights.sbomify.com/CVE-2018-15370/): Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability (medium 6.8)
- [CVE-2018-15369](https://insights.sbomify.com/CVE-2018-15369/): Cisco IOS and IOS XE Software TACACS+ Client Denial of Service Vulnerability (medium 6.8)
- [CVE-2018-15368](https://insights.sbomify.com/CVE-2018-15368/): Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability (medium 6.7)
- [CVE-2018-15367](https://insights.sbomify.com/CVE-2018-15367/): Privilege escalation in Trend Micro Antivirus for Mac (Consumer) (high 7.8)
- [CVE-2018-15366](https://insights.sbomify.com/CVE-2018-15366/): Use after free in Trend Micro Antivirus for Mac (Consumer) (high 7.8)
- [CVE-2018-15365](https://insights.sbomify.com/CVE-2018-15365/): Cross-site scripting in Trend Micro Deep Discovery Inspector (medium 5.4)
- [CVE-2018-15364](https://insights.sbomify.com/CVE-2018-15364/): Information disclosure in Trend Micro OfficeScan (medium 4.7)
- [CVE-2018-15363](https://insights.sbomify.com/CVE-2018-15363/): Memory corruption in Trend Micro Security (Consumer) (high 7.8)
- [CVE-2018-15362](https://insights.sbomify.com/CVE-2018-15362/): XML external entity in GE Proficy Cimplicity GDS (critical 9.1)
- [CVE-2018-15361](https://insights.sbomify.com/CVE-2018-15361/): Memory corruption in UltraVNC (critical 9.8)
- [CVE-2018-15360](https://insights.sbomify.com/CVE-2018-15360/): Hardcoded credentials in Eltex ESP-200 (high 7.3)
- [CVE-2018-1536](https://insights.sbomify.com/CVE-2018-1536/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4)
- [CVE-2018-15359](https://insights.sbomify.com/CVE-2018-15359/): Misconfiguration in Eltex ESP-200 (high 8.8)
- [CVE-2018-15358](https://insights.sbomify.com/CVE-2018-15358/): Privilege escalation in Eltex ESP-200 (high 8.8)
- [CVE-2018-15357](https://insights.sbomify.com/CVE-2018-15357/): Information disclosure in Eltex ESP-200 (medium 6.5)
- [CVE-2018-15356](https://insights.sbomify.com/CVE-2018-15356/): Command injection in Eltex ESP-200 (high 8.8)
- [CVE-2018-15355](https://insights.sbomify.com/CVE-2018-15355/): Weak cryptography in Kraftway (medium 5.9)
- [CVE-2018-15354](https://insights.sbomify.com/CVE-2018-15354/): Memory corruption in Kraftway (high 7.5)
- [CVE-2018-15353](https://insights.sbomify.com/CVE-2018-15353/): Memory corruption in Kraftway (critical 9.8)
- [CVE-2018-15352](https://insights.sbomify.com/CVE-2018-15352/): Denial of service in Kraftway (medium 6.5)
- [CVE-2018-15351](https://insights.sbomify.com/CVE-2018-15351/): Denial of service in Kraftway (medium 6.5)
- [CVE-2018-15350](https://insights.sbomify.com/CVE-2018-15350/): Hardcoded credentials in Kraftway (critical 9.8)
- [CVE-2018-1535](https://insights.sbomify.com/CVE-2018-1535/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4)
- [CVE-2018-1534](https://insights.sbomify.com/CVE-2018-1534/): Cross-site scripting in Rational Publishing Engine (medium 5.4)
- [CVE-2018-15335](https://insights.sbomify.com/CVE-2018-15335/): Other in BIG-IP (APM) (medium 5.9)
- [CVE-2018-15334](https://insights.sbomify.com/CVE-2018-15334/): Cross-site request forgery in BIG-IP (APM) (medium 4.3)
- [CVE-2018-15333](https://insights.sbomify.com/CVE-2018-15333/): Missing authorization in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 5.5)
- [CVE-2018-15332](https://insights.sbomify.com/CVE-2018-15332/): Race condition in BIG-IP (APM), BIG-IP APM Clients, BIG-IP Edge Client (high 7.0)
- [CVE-2018-15331](https://insights.sbomify.com/CVE-2018-15331/): Privilege escalation in BIG-IP (AAM) (high 7.8)
- [CVE-2018-15330](https://insights.sbomify.com/CVE-2018-15330/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5)
- [CVE-2018-1533](https://insights.sbomify.com/CVE-2018-1533/): Cross-site scripting in Rational Publishing Engine (medium 5.4)
- [CVE-2018-15329](https://insights.sbomify.com/CVE-2018-15329/): Missing authorization in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator), Enterprise Manager (high 7.2)
- [CVE-2018-15328](https://insights.sbomify.com/CVE-2018-15328/): Information disclosure in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator), Enterprise Manager, BIG-IQ Centralized Management, F5 iWorkflow (high 7.5)
- [CVE-2018-15327](https://insights.sbomify.com/CVE-2018-15327/): Missing authorization in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator), Enterprise Manager (high 7.2)
- [CVE-2018-15326](https://insights.sbomify.com/CVE-2018-15326/): Security feature bypass in BIG-IP (APM) (high 7.5)
- [CVE-2018-15325](https://insights.sbomify.com/CVE-2018-15325/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 4.3)
- [CVE-2018-15324](https://insights.sbomify.com/CVE-2018-15324/): Denial of service in BIG-IP (APM) (medium 5.9)
- [CVE-2018-15323](https://insights.sbomify.com/CVE-2018-15323/): Denial of service in BIG-IP (LTM, AAM,AFM, Analytics, APM ASM, Edge Gateway, FPS, PSM, Websafe) (medium 5.9)
- [CVE-2018-15322](https://insights.sbomify.com/CVE-2018-15322/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe), BIG-IQ Centralized Management, BIG-IQ Cloud and Orchestration, iWorkflow, Enterprise Manager (medium 6.5)
- [CVE-2018-15321](https://insights.sbomify.com/CVE-2018-15321/): Privilege escalation in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator), BIG-IQ Centralized Management, BIG-IQ Cloud and Orchestration, iWorkflow, Enterprise Manager (medium 4.9)
- [CVE-2018-15320](https://insights.sbomify.com/CVE-2018-15320/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5)
- [CVE-2018-1532](https://insights.sbomify.com/CVE-2018-1532/): Information disclosure in API Connect (medium 4.3)
- [CVE-2018-15319](https://insights.sbomify.com/CVE-2018-15319/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5)
- [CVE-2018-15318](https://insights.sbomify.com/CVE-2018-15318/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5)
- [CVE-2018-15317](https://insights.sbomify.com/CVE-2018-15317/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5)
- [CVE-2018-15316](https://insights.sbomify.com/CVE-2018-15316/): Security feature bypass in BIG-IP (APM) (medium 5.5)
- [CVE-2018-15315](https://insights.sbomify.com/CVE-2018-15315/): Cross-site scripting in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/106/