# Vulnerabilities published in 2020


- [CVE-2020-3206](https://insights.sbomify.com/CVE-2020-3206/): Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability (medium 4.7)
- [CVE-2020-3205](https://insights.sbomify.com/CVE-2020-3205/): Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Inter-VM Channel Command Injection Vulnerability (high 8.8)
- [CVE-2020-3204](https://insights.sbomify.com/CVE-2020-3204/): Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability (medium 6.7)
- [CVE-2020-3203](https://insights.sbomify.com/CVE-2020-3203/): Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3201](https://insights.sbomify.com/CVE-2020-3201/): Cisco IOS and IOS XE Software Tcl Denial of Service Vulnerability (medium 6.0)
- [CVE-2020-3200](https://insights.sbomify.com/CVE-2020-3200/): Cisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability (high 7.7)
- [CVE-2020-3199](https://insights.sbomify.com/CVE-2020-3199/): Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities (high 8.1)
- [CVE-2020-3198](https://insights.sbomify.com/CVE-2020-3198/): Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities (critical 9.8)
- [CVE-2020-3197](https://insights.sbomify.com/CVE-2020-3197/): Cisco Meetings App Missing TURN Server Credentials Expiration Vulnerability (medium 4.3)
- [CVE-2020-3196](https://insights.sbomify.com/CVE-2020-3196/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2020-3195](https://insights.sbomify.com/CVE-2020-3195/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2020-3194](https://insights.sbomify.com/CVE-2020-3194/): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2020-3193](https://insights.sbomify.com/CVE-2020-3193/): Cisco Prime Collaboration Provisioning Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-3192](https://insights.sbomify.com/CVE-2020-3192/): Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-3191](https://insights.sbomify.com/CVE-2020-3191/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2020-3190](https://insights.sbomify.com/CVE-2020-3190/): Cisco IOS XR Software IPsec Packet Processor Denial of Service Vulnerability (medium 5.8)
- [CVE-2020-3189](https://insights.sbomify.com/CVE-2020-3189/): Cisco Firepower Threat Defense Software VPN System Logging Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3188](https://insights.sbomify.com/CVE-2020-3188/): Cisco Firepower Threat Defense Software Management Interface Denial of Service Vulnerability (medium 5.3)
- [CVE-2020-3187](https://insights.sbomify.com/CVE-2020-3187/): Path traversal in Cisco Adaptive Security Appliance (ASA) Software (critical 9.1)
- [CVE-2020-3186](https://insights.sbomify.com/CVE-2020-3186/): Cisco Firepower Threat Defense Software Management Access List Bypass Vulnerability (medium 5.3)
- [CVE-2020-3185](https://insights.sbomify.com/CVE-2020-3185/): Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2020-3184](https://insights.sbomify.com/CVE-2020-3184/): Cisco Prime Collaboration Provisioning Software SQL Injection Vulnerability (medium 6.7)
- [CVE-2020-3182](https://insights.sbomify.com/CVE-2020-3182/): Cisco Webex Meetings Client for MacOS Information Disclosure Vulnerability (medium 4.3)
- [CVE-2020-3181](https://insights.sbomify.com/CVE-2020-3181/): Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability (medium 6.5)
- [CVE-2020-3180](https://insights.sbomify.com/CVE-2020-3180/): Cisco SD-WAN Solution Software Static Credentials Vulnerability (high 8.4)
- [CVE-2020-3179](https://insights.sbomify.com/CVE-2020-3179/): Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3178](https://insights.sbomify.com/CVE-2020-3178/): Cisco Content Security Management Appliance Open Redirect Vulnerabilities (medium 6.1)
- [CVE-2020-3177](https://insights.sbomify.com/CVE-2020-3177/): Cisco Unified Communications Manager Path Traversal Vulnerability (high 7.5)
- [CVE-2020-3176](https://insights.sbomify.com/CVE-2020-3176/): Cisco Remote PHY Device Software Command Injection Vulnerability (medium 6.7)
- [CVE-2020-3175](https://insights.sbomify.com/CVE-2020-3175/): Cisco MDS 9000 Series Multilayer Switches Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3174](https://insights.sbomify.com/CVE-2020-3174/): Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability (medium 4.7)
- [CVE-2020-3173](https://insights.sbomify.com/CVE-2020-3173/): Cisco UCS Manager Software Local Management CLI Command Injection Vulnerability (high 7.8)
- [CVE-2020-3172](https://insights.sbomify.com/CVE-2020-3172/): Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability (high 8.8)
- [CVE-2020-3171](https://insights.sbomify.com/CVE-2020-3171/): Cisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability (high 7.8)
- [CVE-2020-3170](https://insights.sbomify.com/CVE-2020-3170/): Cisco NX-OS Software NX-API Denial of Service Vulnerability (medium 5.3)
- [CVE-2020-3169](https://insights.sbomify.com/CVE-2020-3169/): Cisco FXOS Software CLI Command Injection Vulnerability (medium 6.7)
- [CVE-2020-3168](https://insights.sbomify.com/CVE-2020-3168/): Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability (high 7.5)
- [CVE-2020-3167](https://insights.sbomify.com/CVE-2020-3167/): Cisco FXOS and UCS Manager Software CLI Command Injection Vulnerability (high 7.8)
- [CVE-2020-3166](https://insights.sbomify.com/CVE-2020-3166/): Cisco FXOS Software CLI Arbitrary File Read and Write Vulnerability (medium 4.2)
- [CVE-2020-3165](https://insights.sbomify.com/CVE-2020-3165/): Cisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass Vulnerability (high 8.2)
- [CVE-2020-3164](https://insights.sbomify.com/CVE-2020-3164/): Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability (medium 5.3)
- [CVE-2020-3163](https://insights.sbomify.com/CVE-2020-3163/): Cisco Unified Contact Center Enterprise Denial of Service Vulnerability (medium 6.8)
- [CVE-2020-3162](https://insights.sbomify.com/CVE-2020-3162/): Cisco IoT Field Network Director Denial of Service Vulnerability (high 7.5)
- [CVE-2020-3161](https://insights.sbomify.com/CVE-2020-3161/): Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service (critical 9.8, exploited in the wild)
- [CVE-2020-3160](https://insights.sbomify.com/CVE-2020-3160/): Cisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerability (medium 5.3)
- [CVE-2020-3159](https://insights.sbomify.com/CVE-2020-3159/): Cisco Finesse Web-Based Management Interface Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-3158](https://insights.sbomify.com/CVE-2020-3158/): Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability (critical 9.8)
- [CVE-2020-3157](https://insights.sbomify.com/CVE-2020-3157/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2020-3156](https://insights.sbomify.com/CVE-2020-3156/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-3155](https://insights.sbomify.com/CVE-2020-3155/): Cisco Intelligent Proximity SSL Certificate Validation Vulnerability (high 7.4)
- [CVE-2020-3154](https://insights.sbomify.com/CVE-2020-3154/): Cisco Cloud Web Security SQL Injection Vulnerability (medium 4.9)
- [CVE-2020-3153](https://insights.sbomify.com/CVE-2020-3153/): Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path (medium 6.5, exploited in the wild)
- [CVE-2020-3152](https://insights.sbomify.com/CVE-2020-3152/): Cisco Connected Mobile Experiences Privilege Escalation Vulnerability (medium 6.7)
- [CVE-2020-3151](https://insights.sbomify.com/CVE-2020-3151/): Cisco Connected Mobile Experiences Restricted Shell Escape Vulnerability (medium 5.1)
- [CVE-2020-3150](https://insights.sbomify.com/CVE-2020-3150/): Cisco Small Business RV110W and RV215W Series Routers Information Disclosure Vulnerability (medium 5.9)
- [CVE-2020-3149](https://insights.sbomify.com/CVE-2020-3149/): Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2020-3148](https://insights.sbomify.com/CVE-2020-3148/): Cisco Prime Network Registrar Cross-Site Request Forgery Vulnerability (high 7.1)
- [CVE-2020-3147](https://insights.sbomify.com/CVE-2020-3147/): Cisco Small Business Switches Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3146](https://insights.sbomify.com/CVE-2020-3146/): Cisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities (high 8.8)
- [CVE-2020-3145](https://insights.sbomify.com/CVE-2020-3145/): Cisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities (high 8.8)
- [CVE-2020-3144](https://insights.sbomify.com/CVE-2020-3144/): Cisco RV110W, RV130, RV130W, and RV215W Routers Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2020-3143](https://insights.sbomify.com/CVE-2020-3143/): Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Path Traversal Vulnerability (high 8.8)
- [CVE-2020-3142](https://insights.sbomify.com/CVE-2020-3142/): Cisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join Vulnerability (high 7.5)
- [CVE-2020-3141](https://insights.sbomify.com/CVE-2020-3141/): Cisco IOS XE Software Privilege Escalation Vulnerabilities (high 8.8)
- [CVE-2020-3140](https://insights.sbomify.com/CVE-2020-3140/): Cisco Prime License Manager Privilege Escalation Vulnerability (critical 9.8)
- [CVE-2020-3139](https://insights.sbomify.com/CVE-2020-3139/): Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability (medium 5.3)
- [CVE-2020-3138](https://insights.sbomify.com/CVE-2020-3138/): Cisco Enterprise NFV Infrastructure Software Remote Code Execution Vulnerability (medium 6.7)
- [CVE-2020-3137](https://insights.sbomify.com/CVE-2020-3137/): Cisco Email Security Appliance Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-3136](https://insights.sbomify.com/CVE-2020-3136/): Cisco Jabber Guest Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-3135](https://insights.sbomify.com/CVE-2020-3135/): Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability (medium 6.5)
- [CVE-2020-3134](https://insights.sbomify.com/CVE-2020-3134/): Cisco Email Security Appliance Zip Decompression Engine Denial of Service Vulnerability (medium 6.5)
- [CVE-2020-3133](https://insights.sbomify.com/CVE-2020-3133/): Cisco Email Security Appliance Content Filter Bypass Vulnerability (medium 5.8)
- [CVE-2020-3132](https://insights.sbomify.com/CVE-2020-3132/): Cisco Email Security Appliance Shortened URL Denial of Service Vulnerability (medium 6.8)
- [CVE-2020-3131](https://insights.sbomify.com/CVE-2020-3131/): Cisco Webex Teams Adaptive Cards Denial of Service Vulnerability (medium 6.5)
- [CVE-2020-3130](https://insights.sbomify.com/CVE-2020-3130/): Cisco Unity Connection Directory Traversal Vulnerability (medium 5.9)
- [CVE-2020-3129](https://insights.sbomify.com/CVE-2020-3129/): Cisco Unity Connection Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2020-3128](https://insights.sbomify.com/CVE-2020-3128/): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities (high 7.8)
- [CVE-2020-3127](https://insights.sbomify.com/CVE-2020-3127/): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities (high 7.8)
- [CVE-2020-3126](https://insights.sbomify.com/CVE-2020-3126/): Cisco Webex Meetings Multimedia Viewer Vulnerability (low 3.0)
- [CVE-2020-3125](https://insights.sbomify.com/CVE-2020-3125/): Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability (high 8.1)
- [CVE-2020-3124](https://insights.sbomify.com/CVE-2020-3124/): Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability (medium 6.5)
- [CVE-2020-3123](https://insights.sbomify.com/CVE-2020-3123/): Memory corruption in ClamAV (high 7.5)
- [CVE-2020-3122](https://insights.sbomify.com/CVE-2020-3122/): Cisco Content Security Management Appliance Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-3121](https://insights.sbomify.com/CVE-2020-3121/): Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-3120](https://insights.sbomify.com/CVE-2020-3120/): Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability (high 7.4)
- [CVE-2020-3119](https://insights.sbomify.com/CVE-2020-3119/): Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability (high 8.8)
- [CVE-2020-3118](https://insights.sbomify.com/CVE-2020-3118/): Cisco IOS XR Software Discovery Protocol Format String (high 8.8, exploited in the wild)
- [CVE-2020-3117](https://insights.sbomify.com/CVE-2020-3117/): Cisco Web Security Appliance and Cisco Content Security Management Appliance HTTP Header Injection Vulnerability (medium 4.7)
- [CVE-2020-3116](https://insights.sbomify.com/CVE-2020-3116/): Cisco Webex Centers Denial of Service Vulnerability (medium 5.5)
- [CVE-2020-3115](https://insights.sbomify.com/CVE-2020-3115/): Cisco SD-WAN Solution Local Privilege Escalation Vulnerability (high 8.8)
- [CVE-2020-3114](https://insights.sbomify.com/CVE-2020-3114/): Cisco Data Center Network Manager Cross-Site Request Forgery Vulnerability (high 8.8)
- [CVE-2020-3113](https://insights.sbomify.com/CVE-2020-3113/): Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2020-3112](https://insights.sbomify.com/CVE-2020-3112/): Cisco Data Center Network Manager Privilege Escalation Vulnerability (high 8.8)
- [CVE-2020-3111](https://insights.sbomify.com/CVE-2020-3111/): Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability (high 8.8)
- [CVE-2020-3110](https://insights.sbomify.com/CVE-2020-3110/): Memory corruption in Cisco Video Surveillance 8000 Series IP Cameras (high 8.8)
- [CVE-2020-2984](https://insights.sbomify.com/CVE-2020-2984/): Other in Configuration Manager (high 7.1)
- [CVE-2020-2983](https://insights.sbomify.com/CVE-2020-2983/): Other in Data Masking and Subsetting (high 7.1)
- [CVE-2020-2982](https://insights.sbomify.com/CVE-2020-2982/): Other in Enterprise Manager Base Platform (high 7.1)
- [CVE-2020-2981](https://insights.sbomify.com/CVE-2020-2981/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2020-2978](https://insights.sbomify.com/CVE-2020-2978/): Other in Oracle Database (medium 4.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/88/