CVE-2018-0460: vulnerability in Cisco Enterprise NFV Infrastructure Software
Cisco Enterprise NFV Infrastructure Software Information Disclosure Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.9%
A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read any file on an affected system. The vulnerability is due to insufficient authorization and parameter validation checks. An attacker could exploit this vulnerability by sending a malicious API request with the authentication credentials of a low-privileged user. A successful exploit could allow the attacker to read any file on the affected system.
Affected products
Cisco · Cisco Enterprise NFV Infrastructure SoftwareRelated CVEs — Cisco Enterprise NFV Infrastructure Software
In the same product, most dangerous first.
CVE-2021-34746CRITICALCisco Enterprise NFV Infrastructure Software Authentication Bypass VulnerabilityEPSS 17.7%CVE-2022-20780CRITICALCisco Enterprise NFV Infrastructure Software VulnerabilitiesEPSS 11.2%CVE-2022-20777CRITICALCisco Enterprise NFV Infrastructure Software VulnerabilitiesEPSS 11.1%CVE-2022-20779CRITICALCisco Enterprise NFV Infrastructure Software VulnerabilitiesEPSS 10.5%CVE-2019-1971HIGHCisco Enterprise NFV Infrastructure Software Command Injection VulnerabilityEPSS 3.6%CVE-2019-1894HIGHCisco Enterprise NFV Infrastructure Software Arbitrary File Read and Write VulnerabilityEPSS 3.4%