Cisco Umbrella Insights Virtual Appliance vulnerabilities

2 known vulnerabilities in Cisco Umbrella Insights Virtual Appliance from Cisco. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cisco Umbrella Insights Virtual Appliance: Use of Hard-coded Credentials

  CVE-2022-20773Apr 21, 2022CiscoEPSS 1.18%

  A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an unauthenticated, remote attacker to impersonate a VA. This vulnerability is due to the presence of a static SSH host key. An attacker could ex

• 9.8 Critical severity

  Cisco Umbrella Insights Virtual Appliance: Protection Mechanism Failure

  CVE-2022-20738Feb 10, 2022CiscoEPSS 1.1%

  A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could exp