Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:cisco_thousandeyes_recorder_application:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductCisco Thousandeyes Recorder Application (73d37462-bb03-5f53-a2fb-83be6c06fce8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-20277 vulnerable 2026-06-08 06:27:19.681476 Details available
MEDIUM (6.8)
A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands and elevate privileges to root.
Published: 2024-01-17T16:58:21.065Z
Updated: 2024-10-23T18:47:10.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20224 vulnerable 2026-06-08 05:52:42.315465 Details available
HIGH (7.8)
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to insufficient input validation of user-supplied CLI arguments. An attacker could exploit this vulnerability by authenticating to an affected device and using crafted commands at the prompt. A successful exploit could allow the attacker to execute arbitrary commands as root. The attacker must have valid credentials on the affected device.
Published: 2023-08-16T21:43:47.358Z
Updated: 2024-08-02T09:05:35.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20217 vulnerable 2026-06-08 05:52:41.784041 Details available
MEDIUM (5.5)
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing certain commands using sudo. A successful exploit could allow the attacker to view arbitrary files as root on the underlying operating system. The attacker must have valid credentials on the affected device.
Published: 2023-08-16T21:39:41.364Z
Updated: 2025-07-03T14:03:24.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-1537 vulnerable 2026-06-08 05:28:14.963469 Cisco ThousandEyes Recorder Information Disclosure Vulnerability
MEDIUM (6.2)
A vulnerability in the installer software of Cisco ThousandEyes Recorder could allow an unauthenticated, local attacker to access sensitive information that is contained in the ThousandEyes Recorder installer software. This vulnerability exists because sensitive information is included in the application installer. An attacker could exploit this vulnerability by downloading the installer and extracting its contents. A successful exploit could allow the attacker to access sensitive information that is included in the application installer.
Published: 2021-06-04T16:45:49.671Z
Updated: 2024-11-07T22:09:40.647Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.