Cisco Security Monitoring Analysis And Response System vulnerabilities

2 vulnerabilities

Known vulnerabilities in Cisco Security Monitoring Analysis And Response System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2007-0397ciscoadaptive_security_appliance_device_manager+1
EPSS score
2.92%
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitive information or generate incorrect information.7.5CVE-2006-3733ciscosecurity_monitoring_analysis_and_response_system
EPSS score
11.97%
jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name.