# Vulnerabilities published in 2022


- [CVE-2022-20959](https://insights.sbomify.com/CVE-2022-20959/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20958](https://insights.sbomify.com/CVE-2022-20958/): Server-side request forgery in Cisco BroadWorks (high 8.3)
- [CVE-2022-20956](https://insights.sbomify.com/CVE-2022-20956/): Missing authorization in Cisco Identity Services Engine Software (high 7.1)
- [CVE-2022-20955](https://insights.sbomify.com/CVE-2022-20955/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities (medium 5.5)
- [CVE-2022-20954](https://insights.sbomify.com/CVE-2022-20954/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities (medium 5.5)
- [CVE-2022-20953](https://insights.sbomify.com/CVE-2022-20953/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities (medium 5.5)
- [CVE-2022-20952](https://insights.sbomify.com/CVE-2022-20952/): Security feature bypass in Cisco Secure Web Appliance (medium 5.3)
- [CVE-2022-20951](https://insights.sbomify.com/CVE-2022-20951/): Server-side request forgery in Cisco BroadWorks (high 7.7)
- [CVE-2022-20950](https://insights.sbomify.com/CVE-2022-20950/): Denial of service in Cisco Firepower Threat Defense Software (medium 5.8)
- [CVE-2022-2095](https://insights.sbomify.com/CVE-2022-2095/): Missing authorization in GitLab (medium 4.3)
- [CVE-2022-20949](https://insights.sbomify.com/CVE-2022-20949/): Missing authorization in Cisco Firepower Threat Defense Software (medium 6.5)
- [CVE-2022-20948](https://insights.sbomify.com/CVE-2022-20948/): Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2022-20947](https://insights.sbomify.com/CVE-2022-20947/): Memory corruption in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2022-20946](https://insights.sbomify.com/CVE-2022-20946/): Memory corruption in Cisco Firepower Threat Defense Software (high 8.6)
- [CVE-2022-20945](https://insights.sbomify.com/CVE-2022-20945/): Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability (high 7.4)
- [CVE-2022-20944](https://insights.sbomify.com/CVE-2022-20944/): Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability (medium 6.1)
- [CVE-2022-20943](https://insights.sbomify.com/CVE-2022-20943/): Denial of service in Cisco Cyber Vision (medium 5.8)
- [CVE-2022-20942](https://insights.sbomify.com/CVE-2022-20942/): Missing authorization in Cisco Secure Email (medium 6.5)
- [CVE-2022-20941](https://insights.sbomify.com/CVE-2022-20941/): Missing authorization in Cisco Firepower Management Center (medium 5.3)
- [CVE-2022-20940](https://insights.sbomify.com/CVE-2022-20940/): Weak cryptography in Cisco Firepower Threat Defense Software (medium 5.3)
- [CVE-2022-2094](https://insights.sbomify.com/CVE-2022-2094/): Yellow Yard Searchbar < 2.8.2 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-20939](https://insights.sbomify.com/CVE-2022-20939/): Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability (medium 4.3)
- [CVE-2022-20938](https://insights.sbomify.com/CVE-2022-20938/): XML external entity in Cisco Firepower Management Center (medium 4.3)
- [CVE-2022-20937](https://insights.sbomify.com/CVE-2022-20937/): Denial of service in Cisco Identity Services Engine Software (medium 5.3)
- [CVE-2022-20936](https://insights.sbomify.com/CVE-2022-20936/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20935](https://insights.sbomify.com/CVE-2022-20935/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20934](https://insights.sbomify.com/CVE-2022-20934/): Command injection in Cisco Firepower Extensible Operating System (FXOS) (medium 6.0)
- [CVE-2022-20933](https://insights.sbomify.com/CVE-2022-20933/): Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20932](https://insights.sbomify.com/CVE-2022-20932/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20931](https://insights.sbomify.com/CVE-2022-20931/): Cisco Touch 10 Device Downgrade Attack Vulnerability (medium 6.5)
- [CVE-2022-20930](https://insights.sbomify.com/CVE-2022-20930/): Cisco SD-WAN Software Arbitrary File Corruption Vulnerability (medium 6.7)
- [CVE-2022-2093](https://insights.sbomify.com/CVE-2022-2093/): WP Duplicate Page < 1.3 - Admin+ Stored Cross Site Scripting (medium 4.8)
- [CVE-2022-20929](https://insights.sbomify.com/CVE-2022-20929/): Security feature bypass in Cisco Enterprise NFV Infrastructure Software (high 7.8)
- [CVE-2022-20928](https://insights.sbomify.com/CVE-2022-20928/): Auth bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 5.8)
- [CVE-2022-20927](https://insights.sbomify.com/CVE-2022-20927/): Memory corruption in Cisco Adaptive Security Appliance (ASA) Software (high 7.7)
- [CVE-2022-20926](https://insights.sbomify.com/CVE-2022-20926/): Command injection in Cisco Firepower Management Center (medium 6.3)
- [CVE-2022-20925](https://insights.sbomify.com/CVE-2022-20925/): Command injection in Cisco Firepower Management Center (medium 6.3)
- [CVE-2022-20924](https://insights.sbomify.com/CVE-2022-20924/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 7.7)
- [CVE-2022-20923](https://insights.sbomify.com/CVE-2022-20923/): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers IPSec VPN Server Authentication Bypass Vulnerability (medium 4.0)
- [CVE-2022-20922](https://insights.sbomify.com/CVE-2022-20922/): Denial of service in Cisco Cyber Vision (medium 5.8)
- [CVE-2022-20921](https://insights.sbomify.com/CVE-2022-20921/): Cisco ACI Multi-Site Orchestrator Privilege Escalation Vulnerability (high 8.8)
- [CVE-2022-20920](https://insights.sbomify.com/CVE-2022-20920/): Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability (high 7.7)
- [CVE-2022-2092](https://insights.sbomify.com/CVE-2022-2092/): WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-20919](https://insights.sbomify.com/CVE-2022-20919/): Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20918](https://insights.sbomify.com/CVE-2022-20918/): Hardcoded credentials in Cisco FirePOWER Services Software for ASA (high 7.5)
- [CVE-2022-20917](https://insights.sbomify.com/CVE-2022-20917/): Other in Cisco Jabber (medium 4.3)
- [CVE-2022-20916](https://insights.sbomify.com/CVE-2022-20916/): Cisco IoT Control Center Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20915](https://insights.sbomify.com/CVE-2022-20915/): Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability (high 7.4)
- [CVE-2022-20914](https://insights.sbomify.com/CVE-2022-20914/): Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability (medium 4.9)
- [CVE-2022-20913](https://insights.sbomify.com/CVE-2022-20913/): Cisco Nexus Dashboard Arbitrary File Write Vulnerability (medium 4.9)
- [CVE-2022-20912](https://insights.sbomify.com/CVE-2022-20912/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20911](https://insights.sbomify.com/CVE-2022-20911/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20910](https://insights.sbomify.com/CVE-2022-20910/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-2091](https://insights.sbomify.com/CVE-2022-2091/): Cache Images < 3.2.1 - Image Upload / Import via CSRF (medium 6.5)
- [CVE-2022-20909](https://insights.sbomify.com/CVE-2022-20909/): Cisco Nexus Dashboard Privilege Escalation Vulnerabilities (medium 6.0)
- [CVE-2022-20908](https://insights.sbomify.com/CVE-2022-20908/): Cisco Nexus Dashboard Privilege Escalation Vulnerabilities (medium 6.0)
- [CVE-2022-20907](https://insights.sbomify.com/CVE-2022-20907/): Cisco Nexus Dashboard Privilege Escalation Vulnerabilities (medium 6.0)
- [CVE-2022-20906](https://insights.sbomify.com/CVE-2022-20906/): Cisco Nexus Dashboard Privilege Escalation Vulnerabilities (medium 6.0)
- [CVE-2022-20905](https://insights.sbomify.com/CVE-2022-20905/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20904](https://insights.sbomify.com/CVE-2022-20904/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20903](https://insights.sbomify.com/CVE-2022-20903/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20902](https://insights.sbomify.com/CVE-2022-20902/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20901](https://insights.sbomify.com/CVE-2022-20901/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20900](https://insights.sbomify.com/CVE-2022-20900/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-2090](https://insights.sbomify.com/CVE-2022-2090/): Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-20899](https://insights.sbomify.com/CVE-2022-20899/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20898](https://insights.sbomify.com/CVE-2022-20898/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20897](https://insights.sbomify.com/CVE-2022-20897/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20896](https://insights.sbomify.com/CVE-2022-20896/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20895](https://insights.sbomify.com/CVE-2022-20895/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20894](https://insights.sbomify.com/CVE-2022-20894/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20893](https://insights.sbomify.com/CVE-2022-20893/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20892](https://insights.sbomify.com/CVE-2022-20892/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20891](https://insights.sbomify.com/CVE-2022-20891/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20890](https://insights.sbomify.com/CVE-2022-20890/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-2089](https://insights.sbomify.com/CVE-2022-2089/): Bold Page Builder < 4.3.3 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-20889](https://insights.sbomify.com/CVE-2022-20889/): Memory corruption in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20888](https://insights.sbomify.com/CVE-2022-20888/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20887](https://insights.sbomify.com/CVE-2022-20887/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20886](https://insights.sbomify.com/CVE-2022-20886/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20885](https://insights.sbomify.com/CVE-2022-20885/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20884](https://insights.sbomify.com/CVE-2022-20884/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20883](https://insights.sbomify.com/CVE-2022-20883/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20882](https://insights.sbomify.com/CVE-2022-20882/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20881](https://insights.sbomify.com/CVE-2022-20881/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20880](https://insights.sbomify.com/CVE-2022-20880/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-2088](https://insights.sbomify.com/CVE-2022-2088/): Elcomplus SmartICS Access Control (medium 6.8)
- [CVE-2022-20879](https://insights.sbomify.com/CVE-2022-20879/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20878](https://insights.sbomify.com/CVE-2022-20878/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20877](https://insights.sbomify.com/CVE-2022-20877/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20876](https://insights.sbomify.com/CVE-2022-20876/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20875](https://insights.sbomify.com/CVE-2022-20875/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20874](https://insights.sbomify.com/CVE-2022-20874/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20873](https://insights.sbomify.com/CVE-2022-20873/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.7)
- [CVE-2022-20872](https://insights.sbomify.com/CVE-2022-20872/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20871](https://insights.sbomify.com/CVE-2022-20871/): Cisco Secure Web Appliance Privilege Escalation Vulnerability (medium 6.3)
- [CVE-2022-20870](https://insights.sbomify.com/CVE-2022-20870/): Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability (high 8.6)
- [CVE-2022-2087](https://insights.sbomify.com/CVE-2022-2087/): SourceCodester Bank Management System cross site scripting (low 3.5)
- [CVE-2022-20869](https://insights.sbomify.com/CVE-2022-20869/): Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20868](https://insights.sbomify.com/CVE-2022-20868/): Hardcoded credentials in Cisco Secure Email (medium 4.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/405/