Thousandeyes Enterprise Agent vulnerabilities

2 known vulnerabilities in Thousandeyes Enterprise Agent from Cisco. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  Cisco ThousandEyes Recorder Application: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-20277Jan 17, 2024Cisco

  A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability i

• 7.8 High severity

  Cisco ThousandEyes Recorder Application: Improper Neutralization of Argument Delimiters in a Command

  CVE-2023-20224Aug 16, 2023Cisco

  A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to insufficient input validation