Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:application_services_engine:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductApplication Services Engine (ecb4a494-aa96-5fac-9a40-99032f3fcc8b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-1396 vulnerable 2026-06-08 05:28:14.028697 Cisco Application Services Engine Unauthorized Access Vulnerabilities
CRITICAL (9.8)
Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2021-02-24T19:31:08.457Z
Updated: 2024-11-08T23:37:06.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-1393 vulnerable 2026-06-08 05:28:14.018729 Cisco Application Services Engine Unauthorized Access Vulnerabilities
CRITICAL (9.8)
Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2021-02-24T19:31:04.129Z
Updated: 2024-11-08T23:37:15.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3335 vulnerable 2026-06-08 05:25:54.749591 Cisco Application Services Engine Software Authorization Vulnerability
MEDIUM (5.5)
A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of other users on an affected device. The vulnerability is due to insufficient authorization limitations. An attacker could exploit this vulnerability by logging in to an affected device locally with valid credentials. A successful exploit could allow the attacker to read the sensitive information of other users on the affected device.
Published: 2020-06-03T17:56:32.755Z
Updated: 2024-11-15T17:10:20.742Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3333 vulnerable 2026-06-08 05:25:54.748311 Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability
MEDIUM (5.3)
A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify policies on an affected device. An attacker could exploit this vulnerability by crafting a malicious HTTP request to contact an affected device. A successful exploit could allow the attacker to update event policies on the affected device.
Published: 2020-06-03T17:56:27.583Z
Updated: 2024-11-15T17:10:30.293Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.