CVEs published February 26, 2020
33 CVEs were published on February 26, 2020: 0 critical, 7 high.
- Published
- 33
- Critical
- 0
- High
- 7
- Medium
- 9
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- IBM Sterling B2B Integrator
- 4
- Cisco NX-OS Software
- 3
- Cisco Adaptive Security Appliance (ASA) Software
- 2
- Cisco Firepower Extensible Operating System
- 2
- Cisco NX-OS Software 7.3(2)D1
- 2
- Cisco Unified Computing System
- 2
- IBM WebSphere Service Registry and Repository
- 1
- Moxa ioLogik 2500 series firmware,
- 1
- NetApp FAS 8300/8700 and AFF A400 Baseboard Management Cont…
- 1
- NetApp OnCommand Cloud Manager
- 1
High 7
- CVE-2020-3167Cisco FXOS and UCS Manager Software CLI Command Injection VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3168Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service VulnerabilityCisco NX-OS Software
- CVE-2020-3171Cisco FXOS and UCS Manager Software Local Management CLI Command Injection VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3172Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service VulnerabilityCisco Unified Computing System
- CVE-2020-3173Cisco UCS Manager Software Local Management CLI Command Injection VulnerabilityCisco Unified Computing System
- CVE-2020-3175Cisco MDS 9000 Series Multilayer Switches Denial of Service VulnerabilityCisco NX-OS Software
- CVE-2020-3165Cisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass VulnerabilityCisco NX-OS Software
Medium, low and unrated 26
- CVE-2019-18238In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive informatioMoxa ioLogik 2500 series firmware,
- CVE-2019-17275OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers.NetApp OnCommand Cloud Manager
- CVE-2019-17274NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default aNetApp FAS 8300/8700 and AFF A400 Baseboard Management Cont…
- CVE-2020-3166Cisco FXOS Software CLI Arbitrary File Read and Write VulnerabilityCisco Firepower Extensible Operating System
- CVE-2020-3169Cisco FXOS Software CLI Command Injection VulnerabilityCisco Firepower Extensible Operating System
- CVE-2020-3170Cisco NX-OS Software NX-API Denial of Service VulnerabilityCisco NX-OS Software 7.3(2)D1
- CVE-2020-3174Cisco NX-OS Software Anycast Gateway Invalid ARP VulnerabilityCisco NX-OS Software 7.3(2)D1
- CVE-2019-4726IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attackIBM Sterling B2B Integrator
- CVE-2019-4598IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection.IBM Sterling B2B Integrator
- CVE-2019-4597IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection.IBM Sterling B2B Integrator
- CVE-2019-4596IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting.IBM Sterling B2B Integrator
- CVE-2019-4537IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version information that could be used in further aIBM WebSphere Service Registry and Repository
- CVE-2020-9274An issue was discovered in Pure-FTPd 1.0.49.
- CVE-2020-8951Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager
- CVE-2020-8952Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter.
- CVE-2019-19986An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
- CVE-2019-19987An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
- CVE-2019-19988An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
- CVE-2019-19989An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
- CVE-2019-19990An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
- CVE-2019-19991An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
- CVE-2019-19992An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
- CVE-2019-19993An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
- CVE-2019-19994An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
- CVE-2019-19134The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter bec
- CVE-2020-9337In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request.