# Vulnerabilities published in 2022


- [CVE-2022-20775](https://insights.sbomify.com/CVE-2022-20775/): Cisco SD-WAN Path Traversal (high 7.8, exploited in the wild)
- [CVE-2022-20774](https://insights.sbomify.com/CVE-2022-20774/): Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability (medium 6.8)
- [CVE-2022-20773](https://insights.sbomify.com/CVE-2022-20773/): Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability (high 7.5)
- [CVE-2022-20772](https://insights.sbomify.com/CVE-2022-20772/): Other in Cisco Secure Email (medium 4.7)
- [CVE-2022-20771](https://insights.sbomify.com/CVE-2022-20771/): ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022 (high 7.5)
- [CVE-2022-20770](https://insights.sbomify.com/CVE-2022-20770/): ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022 (high 8.6)
- [CVE-2022-20769](https://insights.sbomify.com/CVE-2022-20769/): Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability (high 7.4)
- [CVE-2022-20768](https://insights.sbomify.com/CVE-2022-20768/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability (medium 4.9)
- [CVE-2022-20767](https://insights.sbomify.com/CVE-2022-20767/): Cisco Firepower Threat Defense Software DNS Enforcement Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20766](https://insights.sbomify.com/CVE-2022-20766/): Cisco ATA 190 Series Analog Telephone Adapter firmware Cisco Discovery Protocol Denial of Service Vulnerability (medium 5.3)
- [CVE-2022-20765](https://insights.sbomify.com/CVE-2022-20765/): Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2022-20764](https://insights.sbomify.com/CVE-2022-20764/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities (medium 6.5)
- [CVE-2022-20763](https://insights.sbomify.com/CVE-2022-20763/): Cisco Webex Meetings Java Deserialization Vulnerability (medium 5.4)
- [CVE-2022-20762](https://insights.sbomify.com/CVE-2022-20762/): Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability (high 7.8)
- [CVE-2022-20761](https://insights.sbomify.com/CVE-2022-20761/): Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability (high 7.4)
- [CVE-2022-20760](https://insights.sbomify.com/CVE-2022-20760/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2022-20759](https://insights.sbomify.com/CVE-2022-20759/): Privilege escalation in Cisco Adaptive Security Appliance (ASA) Software (high 8.8)
- [CVE-2022-20758](https://insights.sbomify.com/CVE-2022-20758/): Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability (medium 6.8)
- [CVE-2022-20757](https://insights.sbomify.com/CVE-2022-20757/): Cisco Firepower Threat Defense Software Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20756](https://insights.sbomify.com/CVE-2022-20756/): Cisco Identity Services Engine RADIUS Service Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20755](https://insights.sbomify.com/CVE-2022-20755/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (critical 9.0)
- [CVE-2022-20754](https://insights.sbomify.com/CVE-2022-20754/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (critical 9.0)
- [CVE-2022-20753](https://insights.sbomify.com/CVE-2022-20753/): Cisco Small Business RV Series Routers Remote Code Execution Vulnerability (medium 4.7)
- [CVE-2022-20752](https://insights.sbomify.com/CVE-2022-20752/): Cisco Unified Communications Products Timing Attack Vulnerability (medium 5.3)
- [CVE-2022-20751](https://insights.sbomify.com/CVE-2022-20751/): Cisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20750](https://insights.sbomify.com/CVE-2022-20750/): Cisco Redundancy Configuration Manager for Cisco StarOS Software TCP Denial of Service Vulnerability (medium 5.3)
- [CVE-2022-2075](https://insights.sbomify.com/CVE-2022-2075/): Denial of service in Octopus Server (high 7.5)
- [CVE-2022-20749](https://insights.sbomify.com/CVE-2022-20749/): Cisco Small Business RV Series Routers Vulnerabilities (critical 10.0)
- [CVE-2022-20748](https://insights.sbomify.com/CVE-2022-20748/): Cisco Firepower Threat Defense Software Local Malware Analysis Denial of Service Vulnerability (medium 5.3)
- [CVE-2022-20747](https://insights.sbomify.com/CVE-2022-20747/): Cisco SD-WAN vManage Software Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-20746](https://insights.sbomify.com/CVE-2022-20746/): Cisco Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20745](https://insights.sbomify.com/CVE-2022-20745/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2022-20744](https://insights.sbomify.com/CVE-2022-20744/): Cisco Firepower Management Center Software Information Disclosure Vulnerability (medium 4.3)
- [CVE-2022-20743](https://insights.sbomify.com/CVE-2022-20743/): Cisco Firepower Management Center File Upload Security Bypass Vulnerability (medium 6.5)
- [CVE-2022-20742](https://insights.sbomify.com/CVE-2022-20742/): Weak cryptography in Cisco Adaptive Security Appliance (ASA) Software (high 7.4)
- [CVE-2022-20741](https://insights.sbomify.com/CVE-2022-20741/): Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2022-20740](https://insights.sbomify.com/CVE-2022-20740/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-2074](https://insights.sbomify.com/CVE-2022-2074/): Denial of service in Octopus Server (high 7.5)
- [CVE-2022-20739](https://insights.sbomify.com/CVE-2022-20739/): Cisco SD-WAN vManage Software Privilege Escalation Vulnerability (high 7.3)
- [CVE-2022-20738](https://insights.sbomify.com/CVE-2022-20738/): Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability (medium 5.8)
- [CVE-2022-20737](https://insights.sbomify.com/CVE-2022-20737/): Cisco Adaptive Security Appliance Software Clientless SSL VPN Heap Overflow Vulnerability (high 8.5)
- [CVE-2022-20736](https://insights.sbomify.com/CVE-2022-20736/): Cisco AppDynamics Controller Authorization Bypass Vulnerability (medium 5.3)
- [CVE-2022-20735](https://insights.sbomify.com/CVE-2022-20735/): Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability (medium 6.5)
- [CVE-2022-20734](https://insights.sbomify.com/CVE-2022-20734/): Cisco SD-WAN vManage Software Information Disclosure Vulnerability (medium 4.4)
- [CVE-2022-20733](https://insights.sbomify.com/CVE-2022-20733/): Cisco Identity Services Engine Authentication Bypass Vulnerability (medium 5.3)
- [CVE-2022-20732](https://insights.sbomify.com/CVE-2022-20732/): Cisco Virtualized Infrastructure Manager Privilege Escalation Vulnerability (high 7.8)
- [CVE-2022-20731](https://insights.sbomify.com/CVE-2022-20731/): Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities (medium 4.6)
- [CVE-2022-20730](https://insights.sbomify.com/CVE-2022-20730/): Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability (medium 4.0)
- [CVE-2022-2073](https://insights.sbomify.com/CVE-2022-2073/): Code Injection in getgrav/grav (critical 9.1)
- [CVE-2022-20729](https://insights.sbomify.com/CVE-2022-20729/): Cisco Firepower Threat Defense Software XML Injection Vulnerability (medium 4.4)
- [CVE-2022-20728](https://insights.sbomify.com/CVE-2022-20728/): Cisco Access Points VLAN Bypass from Native VLAN Vulnerability (medium 4.7)
- [CVE-2022-20727](https://insights.sbomify.com/CVE-2022-20727/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-20726](https://insights.sbomify.com/CVE-2022-20726/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-20725](https://insights.sbomify.com/CVE-2022-20725/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-20724](https://insights.sbomify.com/CVE-2022-20724/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-20723](https://insights.sbomify.com/CVE-2022-20723/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-20722](https://insights.sbomify.com/CVE-2022-20722/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-20721](https://insights.sbomify.com/CVE-2022-20721/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-20720](https://insights.sbomify.com/CVE-2022-20720/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-2072](https://insights.sbomify.com/CVE-2022-2072/): Name Directory < 1.25.3 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-20719](https://insights.sbomify.com/CVE-2022-20719/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-20718](https://insights.sbomify.com/CVE-2022-20718/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-20717](https://insights.sbomify.com/CVE-2022-20717/): Cisco SD-WAN vEdge Routers Denial of Service Vulnerability (medium 5.5)
- [CVE-2022-20716](https://insights.sbomify.com/CVE-2022-20716/): Cisco SD-WAN Solution Improper Access Control Vulnerability (high 7.8)
- [CVE-2022-20715](https://insights.sbomify.com/CVE-2022-20715/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2022-20714](https://insights.sbomify.com/CVE-2022-20714/): Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20713](https://insights.sbomify.com/CVE-2022-20713/): Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software (medium 4.3)
- [CVE-2022-20712](https://insights.sbomify.com/CVE-2022-20712/): Cisco Small Business RV Series Routers Vulnerabilities (critical 10.0)
- [CVE-2022-20711](https://insights.sbomify.com/CVE-2022-20711/): Cisco Small Business RV Series Routers Vulnerabilities (critical 10.0)
- [CVE-2022-20710](https://insights.sbomify.com/CVE-2022-20710/): Cisco Small Business RV Series Routers Vulnerabilities (critical 10.0)
- [CVE-2022-2071](https://insights.sbomify.com/CVE-2022-2071/): Name Directory < 1.25.4 - Stored Cross-Site Scripting via CSRF (medium 6.1)
- [CVE-2022-20709](https://insights.sbomify.com/CVE-2022-20709/): Cisco Small Business RV Series Routers Vulnerabilities (critical 10.0)
- [CVE-2022-20708](https://insights.sbomify.com/CVE-2022-20708/): Cisco Small Business RV Series Routers Stack-based Buffer Overflow (critical 10.0, exploited in the wild)
- [CVE-2022-20707](https://insights.sbomify.com/CVE-2022-20707/): Cisco Small Business RV Series Routers Vulnerabilities (critical 10.0)
- [CVE-2022-20706](https://insights.sbomify.com/CVE-2022-20706/): Cisco Small Business RV Series Routers Vulnerabilities (critical 10.0)
- [CVE-2022-20705](https://insights.sbomify.com/CVE-2022-20705/): Cisco Small Business RV Series Routers Vulnerabilities (critical 10.0)
- [CVE-2022-20704](https://insights.sbomify.com/CVE-2022-20704/): Cisco Small Business RV Series Routers Vulnerabilities (critical 10.0)
- [CVE-2022-20703](https://insights.sbomify.com/CVE-2022-20703/): Cisco Small Business RV Series Routers Stack-based Buffer Overflow (critical 10.0, exploited in the wild)
- [CVE-2022-20702](https://insights.sbomify.com/CVE-2022-20702/): Cisco Small Business RV Series Routers Vulnerabilities (critical 10.0)
- [CVE-2022-20701](https://insights.sbomify.com/CVE-2022-20701/): Cisco Small Business RV Series Routers Stack-based Buffer Overflow (critical 10.0, exploited in the wild)
- [CVE-2022-20700](https://insights.sbomify.com/CVE-2022-20700/): Cisco Small Business RV Series Routers Stack-based Buffer Overflow (critical 10.0, exploited in the wild)
- [CVE-2022-2070](https://insights.sbomify.com/CVE-2022-2070/): Grandstream GSD3710 Stack-based Buffer Overflow (critical 9.8)
- [CVE-2022-20699](https://insights.sbomify.com/CVE-2022-20699/): Cisco Small Business RV Series Routers Stack-based Buffer Overflow (critical 10.0, exploited in the wild)
- [CVE-2022-20698](https://insights.sbomify.com/CVE-2022-20698/): Clam AntiVirus (ClamAV) Denial of Service Vulnerability (high 7.5)
- [CVE-2022-20697](https://insights.sbomify.com/CVE-2022-20697/): Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20696](https://insights.sbomify.com/CVE-2022-20696/): Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability (high 7.5)
- [CVE-2022-20695](https://insights.sbomify.com/CVE-2022-20695/): Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability (critical 10.0)
- [CVE-2022-20694](https://insights.sbomify.com/CVE-2022-20694/): Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability (medium 6.8)
- [CVE-2022-20693](https://insights.sbomify.com/CVE-2022-20693/): Cisco IOS XE Software Web UI API Injection Vulnerability (medium 4.7)
- [CVE-2022-20692](https://insights.sbomify.com/CVE-2022-20692/): Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability (high 7.7)
- [CVE-2022-20691](https://insights.sbomify.com/CVE-2022-20691/): Denial of service in Cisco Analog Telephone Adaptor (ATA) Software (medium 5.3)
- [CVE-2022-20690](https://insights.sbomify.com/CVE-2022-20690/): Memory corruption in Cisco Analog Telephone Adaptor (ATA) Software (medium 5.3)
- [CVE-2022-2069](https://insights.sbomify.com/CVE-2022-2069/): Datalogics APDFL library Heap-based Buffer Overflow (high 7.8)
- [CVE-2022-20689](https://insights.sbomify.com/CVE-2022-20689/): Memory corruption in Cisco Analog Telephone Adaptor (ATA) Software (medium 5.3)
- [CVE-2022-20688](https://insights.sbomify.com/CVE-2022-20688/): Memory corruption in Cisco Analog Telephone Adaptor (ATA) Software (medium 5.3)
- [CVE-2022-20687](https://insights.sbomify.com/CVE-2022-20687/): Memory corruption in Cisco Analog Telephone Adaptor (ATA) Software (medium 5.3)
- [CVE-2022-20686](https://insights.sbomify.com/CVE-2022-20686/): Memory corruption in Cisco Analog Telephone Adaptor (ATA) Software (medium 5.3)
- [CVE-2022-20685](https://insights.sbomify.com/CVE-2022-20685/): Multiple Cisco Products Snort Modbus Denial of Service Vulnerability (high 7.5)
- [CVE-2022-20684](https://insights.sbomify.com/CVE-2022-20684/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability (high 7.4)
- [CVE-2022-20683](https://insights.sbomify.com/CVE-2022-20683/): Memory corruption in Cisco IOS XE Software (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/407/