Secure Endpoint Private Cloud vulnerabilities

6 known vulnerabilities in Secure Endpoint Private Cloud from Cisco. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cisco Secure Endpoint: Out-of-bounds Read

  CVE-2025-20234Jun 18, 2025Cisco

  A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An

• 7.5 High severity

  Cisco Secure Endpoint: Heap-based Buffer Overflow

  CVE-2025-20128Jan 22, 2025CiscoEPSS 1.81%

  A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer underflow in a

• 7.5 High severity

  Cisco Secure Endpoint: Out-of-bounds Read

  CVE-2024-20290Feb 7, 2024CiscoEPSS 33.3%

  A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scannin

• 7.5 High severity

  Cisco Secure Endpoint: Expired Pointer Dereference

  CVE-2023-20212Aug 18, 2023CiscoEPSS 3.44%

  A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An att

• 7.5 High severity

  Cisco Secure Endpoint: Loop with Unreachable Exit Condition

  CVE-2023-20197Aug 16, 2023CiscoEPSS 1.17%

  A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect chec

• 9.8 Critical severity

  Cisco Secure Web Appliance: Out-of-bounds Write

  CVE-2023-20032Mar 1, 2023CiscoEPSS 30.1%

  On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remo