# Vulnerabilities published in 2021


- [CVE-2021-1519](https://insights.sbomify.com/CVE-2021-1519/): Cisco AnyConnect Secure Mobility Client Profile Modification Vulnerability (medium 4.7)
- [CVE-2021-1518](https://insights.sbomify.com/CVE-2021-1518/): Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability (medium 6.3)
- [CVE-2021-1517](https://insights.sbomify.com/CVE-2021-1517/): Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerability (medium 5.0)
- [CVE-2021-1516](https://insights.sbomify.com/CVE-2021-1516/): Information disclosure in Cisco Web Security Appliance (WSA) (medium 4.3)
- [CVE-2021-1515](https://insights.sbomify.com/CVE-2021-1515/): Cisco SD-WAN vManage Information Disclosure Vulnerability (medium 4.3)
- [CVE-2021-1514](https://insights.sbomify.com/CVE-2021-1514/): Cisco SD-WAN Software Privilege Escalation Vulnerability (medium 4.4)
- [CVE-2021-1513](https://insights.sbomify.com/CVE-2021-1513/): Cisco SD-WAN Software vDaemon Denial of Service Vulnerability (high 7.5)
- [CVE-2021-1512](https://insights.sbomify.com/CVE-2021-1512/): Cisco SD-WAN Software Arbitrary File Corruption Vulnerability (medium 4.4)
- [CVE-2021-1511](https://insights.sbomify.com/CVE-2021-1511/): Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities (high 7.5)
- [CVE-2021-1510](https://insights.sbomify.com/CVE-2021-1510/): Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities (high 7.5)
- [CVE-2021-1509](https://insights.sbomify.com/CVE-2021-1509/): Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities (high 7.5)
- [CVE-2021-1508](https://insights.sbomify.com/CVE-2021-1508/): Cisco SD-WAN vManage Software Vulnerabilities (critical 9.8)
- [CVE-2021-1507](https://insights.sbomify.com/CVE-2021-1507/): Cisco SD-WAN vManage API Stored Cross-Site Scripting Vulnerability (medium 6.4)
- [CVE-2021-1506](https://insights.sbomify.com/CVE-2021-1506/): Cisco SD-WAN vManage Software Vulnerabilities (critical 9.8)
- [CVE-2021-1505](https://insights.sbomify.com/CVE-2021-1505/): Cisco SD-WAN vManage Software Vulnerabilities (critical 9.8)
- [CVE-2021-1504](https://insights.sbomify.com/CVE-2021-1504/): Memory corruption in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2021-1503](https://insights.sbomify.com/CVE-2021-1503/): Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability (high 7.8)
- [CVE-2021-1502](https://insights.sbomify.com/CVE-2021-1502/): Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability (high 7.8)
- [CVE-2021-1501](https://insights.sbomify.com/CVE-2021-1501/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2021-1500](https://insights.sbomify.com/CVE-2021-1500/): Cisco Webex Video Mesh Arbitrary Site Redirection Vulnerability (medium 5.4)
- [CVE-2021-1499](https://insights.sbomify.com/CVE-2021-1499/): Cisco HyperFlex HX Data Platform File Upload Vulnerability (medium 5.3)
- [CVE-2021-1498](https://insights.sbomify.com/CVE-2021-1498/): Cisco HyperFlex HX Data Platform Command Injection (critical 9.8, exploited in the wild)
- [CVE-2021-1497](https://insights.sbomify.com/CVE-2021-1497/): Cisco HyperFlex HX Installer Virtual Machine Command Injection (critical 9.8, exploited in the wild)
- [CVE-2021-1496](https://insights.sbomify.com/CVE-2021-1496/): Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities (high 7.0)
- [CVE-2021-1495](https://insights.sbomify.com/CVE-2021-1495/): Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability (medium 5.8)
- [CVE-2021-1494](https://insights.sbomify.com/CVE-2021-1494/): Security feature bypass in Cisco Firepower Threat Defense Software (medium 5.8)
- [CVE-2021-1493](https://insights.sbomify.com/CVE-2021-1493/): Memory corruption in Cisco Adaptive Security Appliance (ASA) Software (high 8.5)
- [CVE-2021-1492](https://insights.sbomify.com/CVE-2021-1492/): Duo Authentication Proxy Installer Denial of Service Vulnerability (medium 6.6)
- [CVE-2021-1491](https://insights.sbomify.com/CVE-2021-1491/): Cisco SD-WAN vManage Software Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-1490](https://insights.sbomify.com/CVE-2021-1490/): Cisco Web Security Appliance Cross-Site Scripting Vulnerability (medium 4.7)
- [CVE-2021-1489](https://insights.sbomify.com/CVE-2021-1489/): Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability (medium 4.9)
- [CVE-2021-1488](https://insights.sbomify.com/CVE-2021-1488/): Command injection in Cisco Adaptive Security Appliance (ASA) Software (medium 6.7)
- [CVE-2021-1487](https://insights.sbomify.com/CVE-2021-1487/): Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection Vulnerability (high 8.8)
- [CVE-2021-1486](https://insights.sbomify.com/CVE-2021-1486/): Cisco SD-WAN vManage HTTP Authentication User Enumeration Vulnerability (medium 5.3)
- [CVE-2021-1485](https://insights.sbomify.com/CVE-2021-1485/): Cisco IOS XR Software Command Injection Vulnerability (medium 6.6)
- [CVE-2021-1484](https://insights.sbomify.com/CVE-2021-1484/): Cisco SD-WAN vManage Command Injection Vulnerability (medium 6.5)
- [CVE-2021-1483](https://insights.sbomify.com/CVE-2021-1483/): Cisco SD-WAN vManage Software XML External Entity Vulnerability (medium 6.4)
- [CVE-2021-1482](https://insights.sbomify.com/CVE-2021-1482/): Cisco SD-WAN vManage Authorization Bypass Vulnerability (medium 6.4)
- [CVE-2021-1481](https://insights.sbomify.com/CVE-2021-1481/): Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability (medium 4.3)
- [CVE-2021-1480](https://insights.sbomify.com/CVE-2021-1480/): Cisco SD-WAN vManage Software Vulnerabilities (high 7.8)
- [CVE-2021-1479](https://insights.sbomify.com/CVE-2021-1479/): Cisco SD-WAN vManage Software Vulnerabilities (high 7.8)
- [CVE-2021-1478](https://insights.sbomify.com/CVE-2021-1478/): Cisco Unified Communications Manager Denial of Service Vulnerability (medium 5.3)
- [CVE-2021-1477](https://insights.sbomify.com/CVE-2021-1477/): Cisco Firepower Management Center Software Policy Vulnerability (medium 4.3)
- [CVE-2021-1476](https://insights.sbomify.com/CVE-2021-1476/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Command Injection Vulnerability (medium 6.7)
- [CVE-2021-1475](https://insights.sbomify.com/CVE-2021-1475/): Cisco Umbrella Link and CSV Formula Injection Vulnerabilities (medium 6.5)
- [CVE-2021-1474](https://insights.sbomify.com/CVE-2021-1474/): Cisco Umbrella Link and CSV Formula Injection Vulnerabilities (medium 6.5)
- [CVE-2021-1473](https://insights.sbomify.com/CVE-2021-1473/): Cisco Small Business RV Series Routers Vulnerabilities (medium 5.3)
- [CVE-2021-1472](https://insights.sbomify.com/CVE-2021-1472/): Cisco Small Business RV Series Routers Vulnerabilities (medium 5.3)
- [CVE-2021-1471](https://insights.sbomify.com/CVE-2021-1471/): Cisco Jabber Desktop and Mobile Client Software Vulnerabilities (critical 9.9)
- [CVE-2021-1470](https://insights.sbomify.com/CVE-2021-1470/): Cisco SD-WAN SQL Injection Vulnerability (medium 4.9)
- [CVE-2021-1469](https://insights.sbomify.com/CVE-2021-1469/): Cisco Jabber Desktop and Mobile Client Software Vulnerabilities (critical 9.9)
- [CVE-2021-1468](https://insights.sbomify.com/CVE-2021-1468/): Cisco SD-WAN vManage Software Vulnerabilities (critical 9.8)
- [CVE-2021-1467](https://insights.sbomify.com/CVE-2021-1467/): Cisco Webex Meetings for Android Avatar Modification Vulnerability (medium 4.3)
- [CVE-2021-1466](https://insights.sbomify.com/CVE-2021-1466/): Cisco SD-WAN vDaemon Buffer Overflow Vulnerability (medium 5.4)
- [CVE-2021-1465](https://insights.sbomify.com/CVE-2021-1465/): Path traversal in Cisco Catalyst SD-WAN Manager (medium 4.3)
- [CVE-2021-1464](https://insights.sbomify.com/CVE-2021-1464/): Cisco SD-WAN vManage Authorization Bypass Vulnerability (medium 5.0)
- [CVE-2021-1463](https://insights.sbomify.com/CVE-2021-1463/): Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2021-1462](https://insights.sbomify.com/CVE-2021-1462/): Cisco SD-WAN vManage Software Privilege Escalation Vulnerability (medium 4.4)
- [CVE-2021-1461](https://insights.sbomify.com/CVE-2021-1461/): Cisco SD-WAN Software Signature Verification Bypass Vulnerability (medium 4.9)
- [CVE-2021-1460](https://insights.sbomify.com/CVE-2021-1460/): Cisco IOx Application Framework Denial of Service Vulnerability (medium 5.3)
- [CVE-2021-1459](https://insights.sbomify.com/CVE-2021-1459/): Memory corruption in Cisco Small Business RV Series Router Firmware (critical 9.8)
- [CVE-2021-1458](https://insights.sbomify.com/CVE-2021-1458/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities (medium 4.8)
- [CVE-2021-1457](https://insights.sbomify.com/CVE-2021-1457/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities (medium 4.8)
- [CVE-2021-1456](https://insights.sbomify.com/CVE-2021-1456/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities (medium 4.8)
- [CVE-2021-1455](https://insights.sbomify.com/CVE-2021-1455/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities (medium 4.8)
- [CVE-2021-1454](https://insights.sbomify.com/CVE-2021-1454/): Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities (medium 6.0)
- [CVE-2021-1453](https://insights.sbomify.com/CVE-2021-1453/): Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution Vulnerability (medium 6.8)
- [CVE-2021-1452](https://insights.sbomify.com/CVE-2021-1452/): Cisco IOS XE ROM Monitor Software for Cisco Industrial Switches OS Command Injection Vulnerability (medium 6.8)
- [CVE-2021-1451](https://insights.sbomify.com/CVE-2021-1451/): Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution Vulnerability (high 8.1)
- [CVE-2021-1450](https://insights.sbomify.com/CVE-2021-1450/): Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability (medium 5.5)
- [CVE-2021-1449](https://insights.sbomify.com/CVE-2021-1449/): Cisco Access Point Software Arbitrary Code Execution Vulnerability (medium 6.7)
- [CVE-2021-1448](https://insights.sbomify.com/CVE-2021-1448/): Cisco Firepower Threat Defense Software Command Injection Vulnerability (high 7.8)
- [CVE-2021-1447](https://insights.sbomify.com/CVE-2021-1447/): Cisco Content Security Management Appliance Privilege Escalation Vulnerability (medium 6.7)
- [CVE-2021-1446](https://insights.sbomify.com/CVE-2021-1446/): Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability (high 8.6)
- [CVE-2021-1445](https://insights.sbomify.com/CVE-2021-1445/): Memory corruption in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2021-1444](https://insights.sbomify.com/CVE-2021-1444/): Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software (medium 6.1)
- [CVE-2021-1443](https://insights.sbomify.com/CVE-2021-1443/): Cisco IOS XE Software Web UI OS Command Injection Vulnerability (medium 5.5)
- [CVE-2021-1442](https://insights.sbomify.com/CVE-2021-1442/): Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability (high 7.0)
- [CVE-2021-1441](https://insights.sbomify.com/CVE-2021-1441/): Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability (medium 6.7)
- [CVE-2021-1440](https://insights.sbomify.com/CVE-2021-1440/): Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability (medium 6.8)
- [CVE-2021-1439](https://insights.sbomify.com/CVE-2021-1439/): Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability (high 7.4)
- [CVE-2021-1438](https://insights.sbomify.com/CVE-2021-1438/): Cisco Wide Area Application Services Software Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-1437](https://insights.sbomify.com/CVE-2021-1437/): Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability (high 7.5)
- [CVE-2021-1436](https://insights.sbomify.com/CVE-2021-1436/): Cisco IOS XE SD-WAN Software Path Traversal Vulnerability (medium 4.4)
- [CVE-2021-1435](https://insights.sbomify.com/CVE-2021-1435/): Cisco IOS XE Software Web UI Command Injection Vulnerability (medium 6.6)
- [CVE-2021-1434](https://insights.sbomify.com/CVE-2021-1434/): Cisco IOS XE SD-WAN Software Arbitrary File Corruption Vulnerability (medium 4.4)
- [CVE-2021-1433](https://insights.sbomify.com/CVE-2021-1433/): Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability (high 8.1)
- [CVE-2021-1432](https://insights.sbomify.com/CVE-2021-1432/): Cisco IOS XE SD-WAN Software Arbitrary Command Execution Vulnerability (high 7.3)
- [CVE-2021-1431](https://insights.sbomify.com/CVE-2021-1431/): Cisco IOS XE SD-WAN Software vDaemon Denial of Service Vulnerability (high 7.5)
- [CVE-2021-1430](https://insights.sbomify.com/CVE-2021-1430/): Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities (high 7.0)
- [CVE-2021-1429](https://insights.sbomify.com/CVE-2021-1429/): Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities (high 7.0)
- [CVE-2021-1428](https://insights.sbomify.com/CVE-2021-1428/): Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities (high 7.0)
- [CVE-2021-1427](https://insights.sbomify.com/CVE-2021-1427/): Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities (high 7.0)
- [CVE-2021-1426](https://insights.sbomify.com/CVE-2021-1426/): Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities (high 7.0)
- [CVE-2021-1425](https://insights.sbomify.com/CVE-2021-1425/): Cisco Cisco Email Security Appliance and Content Security Management Appliance Information Disclosure Vulnerability (medium 4.3)
- [CVE-2021-1424](https://insights.sbomify.com/CVE-2021-1424/): Cisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service Vulnerability (medium 5.3)
- [CVE-2021-1423](https://insights.sbomify.com/CVE-2021-1423/): Cisco Aironet Access Points Arbitrary File Overwrite Vulnerability (medium 4.4)
- [CVE-2021-1422](https://insights.sbomify.com/CVE-2021-1422/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 7.7)
- [CVE-2021-1421](https://insights.sbomify.com/CVE-2021-1421/): Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability (high 7.8)
- [CVE-2021-1420](https://insights.sbomify.com/CVE-2021-1420/): Cisco Webex Meetings HTML Injection Vulnerability (medium 4.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/256/