CVEs published January 26, 2020
31 CVEs were published on January 26, 2020: 0 critical, 9 high.
- Published
- 31
- Critical
- 0
- High
- 9
- Medium
- 15
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco IOS XR Software
- 5
- Cisco SD-WAN Solution
- 3
- dolibarr/dolibarr
- 3
- Cisco 550X Series Stackable Managed Switches
- 1
- Cisco Application Policy Infrastructure Controller
- 1
- Cisco ASR 5000 Series Software
- 1
- Cisco Crosswork Network Change Automation
- 1
- Cisco Data Center Analytics Framework
- 1
- Cisco Email Security Appliance
- 1
- Cisco Finesse
- 1
High 9
- CVE-2020-3142Cisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join VulnerabilityCisco Webex Meetings
- CVE-2019-16005Cisco Webex Video Mesh Node Command Injection VulnerabilityCisco Webex Video Mesh
- CVE-2020-3115Cisco SD-WAN Solution Local Privilege Escalation VulnerabilityCisco SD-WAN Solution
- CVE-2019-16029Cisco Smart Software Manager On-Prem Web Interface Denial of Service VulnerabilityCisco Smart Software Manager On-Prem
- CVE-2019-16027Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2019-16022Cisco IOS XR Software BGP EVPN Denial of Service VulnerabilitiesCisco IOS XR Software
- CVE-2019-16020Cisco IOS XR Software BGP EVPN Denial of Service VulnerabilitiesCisco IOS XR Software
- CVE-2019-16018Cisco IOS XR Software EVPN Operational Routes Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2019-15989Cisco IOS XR Software Border Gateway Protocol Attribute Denial of Service VulnerabilityCisco IOS XR Software
Medium, low and unrated 22
- CVE-2020-7994Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via thedolibarr/dolibarr
- CVE-2020-7995The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts.dolibarr/dolibarr
- CVE-2020-7996htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header.dolibarr/dolibarr
- CVE-2020-7989Adive Framework 2.0.8 has admin/user/add userUsername XSS.
- CVE-2020-7990Adive Framework 2.0.8 has admin/user/add userName XSS.
- CVE-2020-7991Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.
- CVE-2020-7984SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain admin credentials from
- CVE-2019-15278Cisco Finesse Cross-Site Scripting VulnerabilityCisco Finesse
- CVE-2019-16003Cisco UCS Director Information Disclosure VulnerabilityCisco UCS Director
- CVE-2019-16008Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Scripting VulnerabilityCisco IP Phone 7800 Series with Multiplatform Firmware
- CVE-2019-16024Cisco Crosswork Change Automation Cross-Site Scripting VulnerabilityCisco Crosswork Network Change Automation
- CVE-2019-16026Cisco Mobility Management Entity Denial of Service VulnerabilityCisco ASR 5000 Series Software
- CVE-2019-15255Cisco Identity Services Engine Authorization Bypass VulnerabilityCisco Identity Services Engine Software
- CVE-2019-16015Cisco Data Center Analytics Framework Cross-Site Scripting VulnerabilityCisco Data Center Analytics Framework
- CVE-2020-3134Cisco Email Security Appliance Zip Decompression Engine Denial of Service VulnerabilityCisco Email Security Appliance
- CVE-2020-3131Cisco Webex Teams Adaptive Cards Denial of Service VulnerabilityCisco Webex Teams
- CVE-2020-3129Cisco Unity Connection Stored Cross-Site Scripting VulnerabilityCisco Unity Connection
- CVE-2020-3121Cisco Small Business Smart and Managed Switches Cross-Site Scripting VulnerabilityCisco 550X Series Stackable Managed Switches
- CVE-2020-3139Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2020-3136Cisco Jabber Guest Cross-Site Scripting VulnerabilityCisco Jabber Guest
- CVE-2019-12619Cisco SD-WAN Solution SQL Injection VulnerabilityCisco SD-WAN Solution
- CVE-2019-12629Cisco SD-WAN vManage Command Injection VulnerabilityCisco SD-WAN Solution