# Vulnerabilities published in 2022


- [CVE-2022-20682](https://insights.sbomify.com/CVE-2022-20682/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20681](https://insights.sbomify.com/CVE-2022-20681/): Privilege escalation in Cisco IOS XE Software (high 7.8)
- [CVE-2022-20680](https://insights.sbomify.com/CVE-2022-20680/): Cisco Prime Service Catalog Information Disclosure Vulnerability (medium 4.3)
- [CVE-2022-2068](https://insights.sbomify.com/CVE-2022-2068/): The c_rehash script allows command injection (critical 9.8)
- [CVE-2022-20679](https://insights.sbomify.com/CVE-2022-20679/): Cisco IOS XE Software IPSec Denial of Service Vulnerability (medium 6.8)
- [CVE-2022-20678](https://insights.sbomify.com/CVE-2022-20678/): Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20677](https://insights.sbomify.com/CVE-2022-20677/): Cisco IOx Application Hosting Environment Vulnerabilities (medium 5.5)
- [CVE-2022-20676](https://insights.sbomify.com/CVE-2022-20676/): Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability (medium 5.1)
- [CVE-2022-20675](https://insights.sbomify.com/CVE-2022-20675/): Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability (medium 5.3)
- [CVE-2022-20674](https://insights.sbomify.com/CVE-2022-20674/): Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20673](https://insights.sbomify.com/CVE-2022-20673/): Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20672](https://insights.sbomify.com/CVE-2022-20672/): Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20671](https://insights.sbomify.com/CVE-2022-20671/): Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20670](https://insights.sbomify.com/CVE-2022-20670/): Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-2067](https://insights.sbomify.com/CVE-2022-2067/): SQL Injection in francoisjacquet/rosariosis (high 8.8)
- [CVE-2022-20669](https://insights.sbomify.com/CVE-2022-20669/): Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20668](https://insights.sbomify.com/CVE-2022-20668/): Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20667](https://insights.sbomify.com/CVE-2022-20667/): Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20666](https://insights.sbomify.com/CVE-2022-20666/): Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20665](https://insights.sbomify.com/CVE-2022-20665/): Cisco StarOS Command Injection Vulnerability (medium 6.0)
- [CVE-2022-20664](https://insights.sbomify.com/CVE-2022-20664/): Cisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure Vulnerability (high 7.7)
- [CVE-2022-20663](https://insights.sbomify.com/CVE-2022-20663/): Secure Network Analytics Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20662](https://insights.sbomify.com/CVE-2022-20662/): Cisco Duo for macOS Authentication Bypass Vulnerability (medium 6.1)
- [CVE-2022-20661](https://insights.sbomify.com/CVE-2022-20661/): Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities (medium 4.6)
- [CVE-2022-20660](https://insights.sbomify.com/CVE-2022-20660/): Cisco IP Phones Information Disclosure Vulnerability (medium 4.6)
- [CVE-2022-2066](https://insights.sbomify.com/CVE-2022-2066/): Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts (high 7.1)
- [CVE-2022-20659](https://insights.sbomify.com/CVE-2022-20659/): Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20658](https://insights.sbomify.com/CVE-2022-20658/): Privilege escalation in Cisco Unified Contact Center Domain Manager (critical 9.6)
- [CVE-2022-20657](https://insights.sbomify.com/CVE-2022-20657/): Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20656](https://insights.sbomify.com/CVE-2022-20656/): Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal Vulnerability (medium 6.5)
- [CVE-2022-20655](https://insights.sbomify.com/CVE-2022-20655/): Command injection in Cisco Carrier Packet Transport (high 8.8)
- [CVE-2022-20654](https://insights.sbomify.com/CVE-2022-20654/): Cisco Webex Meetings Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20653](https://insights.sbomify.com/CVE-2022-20653/): Cisco Email Security Appliance DNS Verification Denial of Service Vulnerability (high 7.5)
- [CVE-2022-20652](https://insights.sbomify.com/CVE-2022-20652/): Cisco Tetration Command Injection Vulnerability (medium 6.5)
- [CVE-2022-20651](https://insights.sbomify.com/CVE-2022-20651/): Cisco Adaptive Security Device Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-20650](https://insights.sbomify.com/CVE-2022-20650/): Cisco NX-OS Software NX-API Command Injection Vulnerability (high 8.8)
- [CVE-2022-2065](https://insights.sbomify.com/CVE-2022-2065/): Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts (high 8.6)
- [CVE-2022-20649](https://insights.sbomify.com/CVE-2022-20649/): Cisco Redundancy Configuration Manager Debug Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-20648](https://insights.sbomify.com/CVE-2022-20648/): Cisco Redundancy Configuration Manager Debug Information Disclosure Vulnerability (medium 5.3)
- [CVE-2022-20647](https://insights.sbomify.com/CVE-2022-20647/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20646](https://insights.sbomify.com/CVE-2022-20646/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20645](https://insights.sbomify.com/CVE-2022-20645/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20644](https://insights.sbomify.com/CVE-2022-20644/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20643](https://insights.sbomify.com/CVE-2022-20643/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20642](https://insights.sbomify.com/CVE-2022-20642/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20641](https://insights.sbomify.com/CVE-2022-20641/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20640](https://insights.sbomify.com/CVE-2022-20640/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-2064](https://insights.sbomify.com/CVE-2022-2064/): Insufficient Session Expiration in nocodb/nocodb (critical 9.1)
- [CVE-2022-20639](https://insights.sbomify.com/CVE-2022-20639/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20638](https://insights.sbomify.com/CVE-2022-20638/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20637](https://insights.sbomify.com/CVE-2022-20637/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20636](https://insights.sbomify.com/CVE-2022-20636/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20635](https://insights.sbomify.com/CVE-2022-20635/): Cisco Security Manager Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2022-20634](https://insights.sbomify.com/CVE-2022-20634/): Cisco Enterprise Chat and Email Open Redirect Vulnerability (medium 4.7)
- [CVE-2022-20633](https://insights.sbomify.com/CVE-2022-20633/): Cisco Enterprise Chat and Email Username Enumeration Vulnerability (medium 5.3)
- [CVE-2022-20632](https://insights.sbomify.com/CVE-2022-20632/): Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20631](https://insights.sbomify.com/CVE-2022-20631/): Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2022-20630](https://insights.sbomify.com/CVE-2022-20630/): Cisco DNA Center Information Disclosure Vulnerability (medium 4.4)
- [CVE-2022-2063](https://insights.sbomify.com/CVE-2022-2063/): Improper Privilege Management in nocodb/nocodb (critical 9.0)
- [CVE-2022-20629](https://insights.sbomify.com/CVE-2022-20629/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities (medium 5.4)
- [CVE-2022-20628](https://insights.sbomify.com/CVE-2022-20628/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities (medium 5.4)
- [CVE-2022-20627](https://insights.sbomify.com/CVE-2022-20627/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities (medium 5.4)
- [CVE-2022-20626](https://insights.sbomify.com/CVE-2022-20626/): Cisco Prime Access Registrar Appliance Cross-Site Scripting Vulnerability (medium 5.5)
- [CVE-2022-20625](https://insights.sbomify.com/CVE-2022-20625/): Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability (medium 4.3)
- [CVE-2022-20624](https://insights.sbomify.com/CVE-2022-20624/): Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20623](https://insights.sbomify.com/CVE-2022-20623/): Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20622](https://insights.sbomify.com/CVE-2022-20622/): Cisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service Vulnerability (high 8.6)
- [CVE-2022-20621](https://insights.sbomify.com/CVE-2022-20621/): Access key stored in plain text by Jenkins Metrics Plugin (medium 5.5)
- [CVE-2022-20620](https://insights.sbomify.com/CVE-2022-20620/): Missing permission checks in SSH Agent Plugin allow enumerating credentials IDs (medium 4.3)
- [CVE-2022-2062](https://insights.sbomify.com/CVE-2022-2062/): Generation of Error Message Containing Sensitive Information in nocodb/nocodb (critical 9.1)
- [CVE-2022-20619](https://insights.sbomify.com/CVE-2022-20619/): Cross-Site Request Forgery in Jenkins Bitbucket Branch Source Plugin (high 7.1)
- [CVE-2022-20618](https://insights.sbomify.com/CVE-2022-20618/): Incorrect Permission Assignment for Critical Resource in Jenkins Bitbucket Branch Source Plugin (medium 4.3)
- [CVE-2022-20617](https://insights.sbomify.com/CVE-2022-20617/): OS command execution vulnerability in Jenkins Docker Commons Plugin (high 8.8)
- [CVE-2022-20616](https://insights.sbomify.com/CVE-2022-20616/): Incorrect Permission Assignment for Critical Resource in Jenkins Credentials Binding Plugin (medium 4.3)
- [CVE-2022-20615](https://insights.sbomify.com/CVE-2022-20615/): Stored XSS vulnerability in Matrix Project Plugin (medium 5.4)
- [CVE-2022-20614](https://insights.sbomify.com/CVE-2022-20614/): Incorrect Permission Assignment for Critical Resource in Jenkins Mailer Plugin (medium 4.3)
- [CVE-2022-20613](https://insights.sbomify.com/CVE-2022-20613/): Cross-Site Request Forgery in Jenkins Mailer Plugin (medium 4.3)
- [CVE-2022-20612](https://insights.sbomify.com/CVE-2022-20612/): Cross-Site Request Forgery in Jenkins (medium 4.3)
- [CVE-2022-20611](https://insights.sbomify.com/CVE-2022-20611/): Privilege escalation in Android (high 7.8)
- [CVE-2022-20610](https://insights.sbomify.com/CVE-2022-20610/): Memory corruption in Android (high 8.8)
- [CVE-2022-2061](https://insights.sbomify.com/CVE-2022-2061/): Heap-based Buffer Overflow in hpjansson/chafa (low 2.8)
- [CVE-2022-20609](https://insights.sbomify.com/CVE-2022-20609/): Memory corruption in Android (medium 5.5)
- [CVE-2022-20608](https://insights.sbomify.com/CVE-2022-20608/): Memory corruption in Android (medium 5.5)
- [CVE-2022-20607](https://insights.sbomify.com/CVE-2022-20607/): Memory corruption in Android (high 8.8)
- [CVE-2022-20606](https://insights.sbomify.com/CVE-2022-20606/): Memory corruption in Android (medium 4.9)
- [CVE-2022-20605](https://insights.sbomify.com/CVE-2022-20605/): Memory corruption in Android (high 7.5)
- [CVE-2022-20604](https://insights.sbomify.com/CVE-2022-20604/): Memory corruption in Android (medium 5.5)
- [CVE-2022-20603](https://insights.sbomify.com/CVE-2022-20603/): Memory corruption in Android (high 7.2)
- [CVE-2022-20602](https://insights.sbomify.com/CVE-2022-20602/): Memory corruption in Android (high 7.5)
- [CVE-2022-20601](https://insights.sbomify.com/CVE-2022-20601/): Memory corruption in Android (high 7.5)
- [CVE-2022-20600](https://insights.sbomify.com/CVE-2022-20600/): Memory corruption in Android (high 7.8)
- [CVE-2022-2060](https://insights.sbomify.com/CVE-2022-2060/): Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr (high 8.4)
- [CVE-2022-20599](https://insights.sbomify.com/CVE-2022-20599/): Memory corruption in Android (medium 6.7)
- [CVE-2022-20598](https://insights.sbomify.com/CVE-2022-20598/): Integer overflow in Android (high 7.8)
- [CVE-2022-20597](https://insights.sbomify.com/CVE-2022-20597/): Integer overflow in Android (high 7.8)
- [CVE-2022-20596](https://insights.sbomify.com/CVE-2022-20596/): Memory corruption in Android (medium 6.7)
- [CVE-2022-20595](https://insights.sbomify.com/CVE-2022-20595/): Memory corruption in Android (medium 4.4)
- [CVE-2022-20594](https://insights.sbomify.com/CVE-2022-20594/): Memory corruption in Android (medium 6.7)
- [CVE-2022-20593](https://insights.sbomify.com/CVE-2022-20593/): Memory corruption in Android (medium 4.4)
- [CVE-2022-20592](https://insights.sbomify.com/CVE-2022-20592/): Information disclosure in Android (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/408/