# Vulnerabilities published in 2022


- [CVE-2022-20867](https://insights.sbomify.com/CVE-2022-20867/): SQL injection in Cisco Secure Email (medium 5.4)
- [CVE-2022-20866](https://insights.sbomify.com/CVE-2022-20866/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability (high 7.4)
- [CVE-2022-20865](https://insights.sbomify.com/CVE-2022-20865/): Cisco FXOS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2022-20864](https://insights.sbomify.com/CVE-2022-20864/): Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability (medium 4.6)
- [CVE-2022-20863](https://insights.sbomify.com/CVE-2022-20863/): Cisco Webex Meetings App Character Interface Manipulation Vulnerability (medium 4.3)
- [CVE-2022-20862](https://insights.sbomify.com/CVE-2022-20862/): Cisco Unified Communications Manager Arbitrary File Read Vulnerability (medium 4.3)
- [CVE-2022-20861](https://insights.sbomify.com/CVE-2022-20861/): Cisco Nexus Dashboard Unauthorized Access Vulnerabilities (critical 9.8)
- [CVE-2022-20860](https://insights.sbomify.com/CVE-2022-20860/): Cisco Nexus Dashboard SSL Certificate Validation Vulnerability (high 7.4)
- [CVE-2022-2086](https://insights.sbomify.com/CVE-2022-2086/): SourceCodester Bank Management System login.php sql injection (medium 6.3)
- [CVE-2022-20859](https://insights.sbomify.com/CVE-2022-20859/): Cisco Unified Communications Products Access Control Vulnerability (medium 6.5)
- [CVE-2022-20858](https://insights.sbomify.com/CVE-2022-20858/): Cisco Nexus Dashboard Unauthorized Access Vulnerabilities (critical 9.8)
- [CVE-2022-20857](https://insights.sbomify.com/CVE-2022-20857/): Cisco Nexus Dashboard Unauthorized Access Vulnerabilities (critical 9.8)
- [CVE-2022-20856](https://insights.sbomify.com/CVE-2022-20856/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20855](https://insights.sbomify.com/CVE-2022-20855/): Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability (high 7.9)
- [CVE-2022-20854](https://insights.sbomify.com/CVE-2022-20854/): Denial of service in Cisco Firepower Management Center (high 7.5)
- [CVE-2022-20853](https://insights.sbomify.com/CVE-2022-20853/): Cisco Expressway Series and Cisco TelePresence VCS Cross-Site Request Forgery Vulnerability (high 7.4)
- [CVE-2022-20852](https://insights.sbomify.com/CVE-2022-20852/): Cisco Webex Meetings Web Interface Vulnerabilities (medium 5.4)
- [CVE-2022-20851](https://insights.sbomify.com/CVE-2022-20851/): Cisco IOS XE Software Web UI Command Injection Vulnerability (medium 5.5)
- [CVE-2022-20850](https://insights.sbomify.com/CVE-2022-20850/): Cisco SD-WAN Arbitrary File Deletion Vulnerability (medium 5.5)
- [CVE-2022-2085](https://insights.sbomify.com/CVE-2022-2085/): Null dereference in GhostScript (medium 5.5)
- [CVE-2022-20849](https://insights.sbomify.com/CVE-2022-20849/): Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability (medium 6.1)
- [CVE-2022-20848](https://insights.sbomify.com/CVE-2022-20848/): Denial of service in Cisco IOS XE Software (high 8.6)
- [CVE-2022-20847](https://insights.sbomify.com/CVE-2022-20847/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20846](https://insights.sbomify.com/CVE-2022-20846/): Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability (medium 4.3)
- [CVE-2022-20845](https://insights.sbomify.com/CVE-2022-20845/): Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability (medium 6.0)
- [CVE-2022-20844](https://insights.sbomify.com/CVE-2022-20844/): Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability (medium 5.3)
- [CVE-2022-20843](https://insights.sbomify.com/CVE-2022-20843/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20842](https://insights.sbomify.com/CVE-2022-20842/): Cisco Small Business RV Series Routers Vulnerabilities (critical 9.0)
- [CVE-2022-20841](https://insights.sbomify.com/CVE-2022-20841/): Cisco Small Business RV Series Routers Vulnerabilities (critical 9.0)
- [CVE-2022-20840](https://insights.sbomify.com/CVE-2022-20840/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-2084](https://insights.sbomify.com/CVE-2022-2084/): sensitive data exposure in cloud-init logs (medium 5.5)
- [CVE-2022-20839](https://insights.sbomify.com/CVE-2022-20839/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20838](https://insights.sbomify.com/CVE-2022-20838/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20837](https://insights.sbomify.com/CVE-2022-20837/): Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20836](https://insights.sbomify.com/CVE-2022-20836/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20835](https://insights.sbomify.com/CVE-2022-20835/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20834](https://insights.sbomify.com/CVE-2022-20834/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20833](https://insights.sbomify.com/CVE-2022-20833/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20832](https://insights.sbomify.com/CVE-2022-20832/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20831](https://insights.sbomify.com/CVE-2022-20831/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2022-20830](https://insights.sbomify.com/CVE-2022-20830/): Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability (medium 5.3)
- [CVE-2022-2083](https://insights.sbomify.com/CVE-2022-2083/): Simple Single Sign On <= 4.1.0 - Authentication Bypass (high 7.5)
- [CVE-2022-20829](https://insights.sbomify.com/CVE-2022-20829/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (critical 9.1)
- [CVE-2022-20828](https://insights.sbomify.com/CVE-2022-20828/): Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability (medium 6.5)
- [CVE-2022-20827](https://insights.sbomify.com/CVE-2022-20827/): Cisco Small Business RV Series Routers Vulnerabilities (critical 9.0)
- [CVE-2022-20826](https://insights.sbomify.com/CVE-2022-20826/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 6.4)
- [CVE-2022-20825](https://insights.sbomify.com/CVE-2022-20825/): Memory corruption in Cisco Small Business RV Series Router Firmware (critical 9.8)
- [CVE-2022-20824](https://insights.sbomify.com/CVE-2022-20824/): Cisco FXOS and NX-OS Software Cisco Discovery Protocol Denial of Service and Arbitrary Code Execution Vulnerability (high 8.8)
- [CVE-2022-20823](https://insights.sbomify.com/CVE-2022-20823/): Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20822](https://insights.sbomify.com/CVE-2022-20822/): Cisco Identity Services Engine Unauthorized File Access Vulnerability (high 7.1)
- [CVE-2022-20821](https://insights.sbomify.com/CVE-2022-20821/): Cisco IOS XR Open Port (medium 6.5, exploited in the wild)
- [CVE-2022-20820](https://insights.sbomify.com/CVE-2022-20820/): Cisco Webex Meetings Web Interface Vulnerabilities (medium 5.4)
- [CVE-2022-20819](https://insights.sbomify.com/CVE-2022-20819/): Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-20818](https://insights.sbomify.com/CVE-2022-20818/): Cisco SD-WAN Software Privilege Escalation Vulnerabilities (high 7.8)
- [CVE-2022-20817](https://insights.sbomify.com/CVE-2022-20817/): Cisco IP Phone Duplicate Key Vulnerability (high 7.4)
- [CVE-2022-20816](https://insights.sbomify.com/CVE-2022-20816/): Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability (medium 6.5)
- [CVE-2022-20815](https://insights.sbomify.com/CVE-2022-20815/): Cisco Unified Communications Products Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20814](https://insights.sbomify.com/CVE-2022-20814/): Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability (high 7.4)
- [CVE-2022-20813](https://insights.sbomify.com/CVE-2022-20813/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (critical 9.0)
- [CVE-2022-20812](https://insights.sbomify.com/CVE-2022-20812/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (critical 9.0)
- [CVE-2022-20811](https://insights.sbomify.com/CVE-2022-20811/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities (medium 5.5)
- [CVE-2022-20810](https://insights.sbomify.com/CVE-2022-20810/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-2081](https://insights.sbomify.com/CVE-2022-2081/): Denial of service in RTU500 series CMU firmware (high 7.5)
- [CVE-2022-20809](https://insights.sbomify.com/CVE-2022-20809/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (medium 4.3)
- [CVE-2022-20808](https://insights.sbomify.com/CVE-2022-20808/): Cisco Smart Software Manager On-Prem Denial of Service Vulnerability (high 7.7)
- [CVE-2022-20807](https://insights.sbomify.com/CVE-2022-20807/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (medium 4.3)
- [CVE-2022-20806](https://insights.sbomify.com/CVE-2022-20806/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (medium 4.3)
- [CVE-2022-20805](https://insights.sbomify.com/CVE-2022-20805/): Cisco Umbrella Secure Web Gateway File Decryption Bypass Vulnerability (medium 4.1)
- [CVE-2022-20804](https://insights.sbomify.com/CVE-2022-20804/): Cisco Unified Communications Products Denial of Service Vulnerability (medium 5.3)
- [CVE-2022-20803](https://insights.sbomify.com/CVE-2022-20803/): ClamAV Double-free Vulnerability in the OLE2 File Parser (high 8.6)
- [CVE-2022-20802](https://insights.sbomify.com/CVE-2022-20802/): Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2022-20801](https://insights.sbomify.com/CVE-2022-20801/): Cisco Small Business RV Series Routers Command Injection Vulnerabilities (medium 4.7)
- [CVE-2022-20800](https://insights.sbomify.com/CVE-2022-20800/): Cisco Unified Communications Products Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-2080](https://insights.sbomify.com/CVE-2022-2080/): Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR (medium 4.3)
- [CVE-2022-20799](https://insights.sbomify.com/CVE-2022-20799/): Cisco Small Business RV Series Routers Command Injection Vulnerabilities (medium 4.7)
- [CVE-2022-20798](https://insights.sbomify.com/CVE-2022-20798/): Cisco Email Security Appliance and Cisco Secure Email and Web Manager External Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2022-20797](https://insights.sbomify.com/CVE-2022-20797/): Cisco Secure Network Analytics Remote Code Execution Vulnerability (medium 5.5)
- [CVE-2022-20796](https://insights.sbomify.com/CVE-2022-20796/): ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022 (medium 6.5)
- [CVE-2022-20795](https://insights.sbomify.com/CVE-2022-20795/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (medium 5.8)
- [CVE-2022-20794](https://insights.sbomify.com/CVE-2022-20794/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities (medium 6.5)
- [CVE-2022-20793](https://insights.sbomify.com/CVE-2022-20793/): Cisco Touch 10 Device Insufficient Identity Verification Vulnerability (medium 6.8)
- [CVE-2022-20792](https://insights.sbomify.com/CVE-2022-20792/): Memory corruption in Clam AntiVirus (ClamAV) (high 7.8)
- [CVE-2022-20791](https://insights.sbomify.com/CVE-2022-20791/): Cisco Unified Communications Products Arbitrary File Read Vulnerability (medium 6.5)
- [CVE-2022-20790](https://insights.sbomify.com/CVE-2022-20790/): Cisco Unified Communications Products Arbitrary File Read Vulnerability (medium 6.5)
- [CVE-2022-2079](https://insights.sbomify.com/CVE-2022-2079/): Cross-site Scripting (XSS) - Stored in nocodb/nocodb (high 7.3)
- [CVE-2022-20789](https://insights.sbomify.com/CVE-2022-20789/): Cisco Unified Communications Products Arbitrary File Write Vulnerability (medium 4.9)
- [CVE-2022-20788](https://insights.sbomify.com/CVE-2022-20788/): Cisco Unified Communications Products Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20787](https://insights.sbomify.com/CVE-2022-20787/): Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability (medium 5.7)
- [CVE-2022-20786](https://insights.sbomify.com/CVE-2022-20786/): Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability (medium 5.4)
- [CVE-2022-20785](https://insights.sbomify.com/CVE-2022-20785/): ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022 (high 7.5)
- [CVE-2022-20784](https://insights.sbomify.com/CVE-2022-20784/): Cisco Web Security Appliance Filter Bypass Vulnerability (medium 5.8)
- [CVE-2022-20783](https://insights.sbomify.com/CVE-2022-20783/): Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability (high 7.5)
- [CVE-2022-20782](https://insights.sbomify.com/CVE-2022-20782/): Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-20781](https://insights.sbomify.com/CVE-2022-20781/): Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2022-20780](https://insights.sbomify.com/CVE-2022-20780/): Cisco Enterprise NFV Infrastructure Software Vulnerabilities (critical 9.9)
- [CVE-2022-2078](https://insights.sbomify.com/CVE-2022-2078/): Memory corruption in kernel (medium 5.5)
- [CVE-2022-20779](https://insights.sbomify.com/CVE-2022-20779/): Cisco Enterprise NFV Infrastructure Software Vulnerabilities (critical 9.9)
- [CVE-2022-20778](https://insights.sbomify.com/CVE-2022-20778/): Cisco Webex Meetings Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20777](https://insights.sbomify.com/CVE-2022-20777/): Cisco Enterprise NFV Infrastructure Software Vulnerabilities (critical 9.9)
- [CVE-2022-20776](https://insights.sbomify.com/CVE-2022-20776/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/406/