# CVEs published 2020-02-26 33 CVEs were published on February 26, 2020: 0 critical, 7 high. Days are UTC. - [CVE-2019-18238](https://cve.now/CVE-2019-18238.md): In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive informatio (no CVSS, Moxa ioLogik 2500 series firmware,) - [CVE-2019-17275](https://cve.now/CVE-2019-17275.md): OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers. (no CVSS, NetApp OnCommand Cloud Manager) - [CVE-2019-17274](https://cve.now/CVE-2019-17274.md): NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default a (no CVSS, NetApp FAS 8300/8700 and AFF A400 Baseboard Management Cont…) - [CVE-2020-3166](https://cve.now/CVE-2020-3166.md): Cisco FXOS Software CLI Arbitrary File Read and Write Vulnerability (CVSS 4.2, Cisco Firepower Extensible Operating System) - [CVE-2020-3167](https://cve.now/CVE-2020-3167.md): Cisco FXOS and UCS Manager Software CLI Command Injection Vulnerability (CVSS 7.8, Cisco Adaptive Security Appliance (ASA) Software) - [CVE-2020-3168](https://cve.now/CVE-2020-3168.md): Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability (CVSS 7.5, Cisco NX-OS Software) - [CVE-2020-3169](https://cve.now/CVE-2020-3169.md): Cisco FXOS Software CLI Command Injection Vulnerability (CVSS 6.7, Cisco Firepower Extensible Operating System) - [CVE-2020-3170](https://cve.now/CVE-2020-3170.md): Cisco NX-OS Software NX-API Denial of Service Vulnerability (CVSS 5.3, Cisco NX-OS Software 7.3(2)D1) - [CVE-2020-3171](https://cve.now/CVE-2020-3171.md): Cisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability (CVSS 7.8, Cisco Adaptive Security Appliance (ASA) Software) - [CVE-2020-3172](https://cve.now/CVE-2020-3172.md): Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability (CVSS 8.8, Cisco Unified Computing System) - [CVE-2020-3173](https://cve.now/CVE-2020-3173.md): Cisco UCS Manager Software Local Management CLI Command Injection Vulnerability (CVSS 7.8, Cisco Unified Computing System) - [CVE-2020-3174](https://cve.now/CVE-2020-3174.md): Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability (CVSS 4.7, Cisco NX-OS Software 7.3(2)D1) - [CVE-2020-3175](https://cve.now/CVE-2020-3175.md): Cisco MDS 9000 Series Multilayer Switches Denial of Service Vulnerability (CVSS 8.6, Cisco NX-OS Software) - [CVE-2020-3165](https://cve.now/CVE-2020-3165.md): Cisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass Vulnerability (CVSS 8.2, Cisco NX-OS Software) - [CVE-2019-4726](https://cve.now/CVE-2019-4726.md): IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attack (CVSS 4.3, IBM Sterling B2B Integrator) - [CVE-2019-4598](https://cve.now/CVE-2019-4598.md): IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. (CVSS 6.3, IBM Sterling B2B Integrator) - [CVE-2019-4597](https://cve.now/CVE-2019-4597.md): IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. (CVSS 6.3, IBM Sterling B2B Integrator) - [CVE-2019-4596](https://cve.now/CVE-2019-4596.md): IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Sterling B2B Integrator) - [CVE-2019-4537](https://cve.now/CVE-2019-4537.md): IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version information that could be used in further a (CVSS 5.3, IBM WebSphere Service Registry and Repository) - [CVE-2020-9274](https://cve.now/CVE-2020-9274.md): An issue was discovered in Pure-FTPd 1.0.49. (no CVSS) - [CVE-2020-8951](https://cve.now/CVE-2020-8951.md): Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager (no CVSS) - [CVE-2020-8952](https://cve.now/CVE-2020-8952.md): Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter. (no CVSS) - [CVE-2019-19986](https://cve.now/CVE-2019-19986.md): An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. (no CVSS) - [CVE-2019-19987](https://cve.now/CVE-2019-19987.md): An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. (no CVSS) - [CVE-2019-19988](https://cve.now/CVE-2019-19988.md): An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. (no CVSS) - [CVE-2019-19989](https://cve.now/CVE-2019-19989.md): An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. (no CVSS) - [CVE-2019-19990](https://cve.now/CVE-2019-19990.md): An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. (no CVSS) - [CVE-2019-19991](https://cve.now/CVE-2019-19991.md): An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. (no CVSS) - [CVE-2019-19992](https://cve.now/CVE-2019-19992.md): An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. (no CVSS) - [CVE-2019-19993](https://cve.now/CVE-2019-19993.md): An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. (no CVSS) - [CVE-2019-19994](https://cve.now/CVE-2019-19994.md): An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. (no CVSS) - [CVE-2019-19134](https://cve.now/CVE-2019-19134.md): The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter bec (no CVSS) - [CVE-2020-9337](https://cve.now/CVE-2020-9337.md): In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2020-02-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.