GCVE - cpe:2.3:a:cisco:security_manager:3.1.1:sp3:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:security_manager:3.1.1:sp3:*:*:*:*:*:*

part: a version: 3.1.1 update: sp3

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-2138`	vulnerable	2026-06-08 05:05:27.688346	Details available CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCun82349. Published: 2014-04-02T01:00:00.000Z Updated: 2024-08-06T10:05:59.703Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2138 http://tools.cisco.com/security/center/viewAlert.x?alertId=33607	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3820`	vulnerable	2026-06-08 04:50:36.592073	Details available Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports. Published: 2009-01-22T18:00:00.000Z Updated: 2024-08-07T09:52:59.866Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/33381 https://exchange.xforce.ibmcloud.com/vulnerabilities/48134 http://www.securitytracker.com/id?1021619 http://www.vupen.com/english/advisories/2009/0214 http://secunia.com/advisories/33633	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.