Cisco Intersight Virtual Appliance — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Intersight Virtual Appliance, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2021-34748 — CVSS 8.8 (high): A vulnerability in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote attacker…
• CVE-2021-1601 — CVSS 8.3 (high): Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access sensitive…
• CVE-2021-1600 — CVSS 8.3 (high): Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access sensitive…
• CVE-2021-1618 — CVSS 6.5 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote…
• CVE-2021-1617 — CVSS 6.5 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote…
• CVE-2023-20237 — CVSS 4.3 (medium): A vulnerability in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access internal HTTP services…