Riverbed Technology vulnerabilities
We track 2 vulnerabilities in Riverbed Technology products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2025.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest Riverbed Technology vulnerabilities
- 10.0 Critical severity
SteelCentral NetExpress: Improper Neutralization of Special Elements used in an OS Command
An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances. A SQL injection vulnerability in the '/api/common/1.0/login' endpoint can be exploited to create a new user a
- 7.1 High severity
SteelHead VCX: Exposure of Sensitive Information to an Unauthorized Actor
A path traversal vulnerability exists in Riverbed SteelHead VCX appliances (confirmed in VCX255U 9.6.0a) due to improper input validation in the log filtering functionality exposed via the management web interface. An authenticated attacker can exploit this fl