Cisco Cisco Umbrella Insights Virtual Appliance

Name: Cisco Cisco Umbrella Insights Virtual Appliance
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical6high16medium0low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-1350US	medium5.3	1.30% (70th)	—	no fix	2021-01-20	2 versions
CVE-2022-20773US	high7.5OT elevated	1.18% (68th)	—	no fix	2022-04-21	2 versions
CVE-2022-20738US	critical9.8	1.10% (66th)	—	no fix	2022-02-10	2 versions
CVE-2021-40126US	medium4.3	0.87% (59th)	—	no fix	2021-11-04	2 versions
CVE-2022-20922US	medium6.5	0.85% (58th)	—	no fix	2022-11-15	33 versions
CVE-2021-1474US	high8.6	0.72% (54th)	—	no fix	2021-04-08	2 versions
CVE-2021-1475US	medium4.1	0.69% (52nd)	—	no fix	2021-04-08	2 versions
CVE-2026-20218US	medium5.8	0.63% (50th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20221US	medium5.8	0.58% (47th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2023-20246US	medium5.3	0.56% (47th)	—	no fix	2023-11-01	2 versions
CVE-2026-20019US	medium5.8	0.53% (44th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20011US	medium5.8	0.53% (44th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-76445US	medium5.3	0.53% (44th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2023-20071US	medium5.8	0.52% (44th)	—	no fix	2023-11-01	2 versions
CVE-2026-20197US	medium5.8	0.50% (42nd)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20179US	medium5.8	0.50% (42nd)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-76489US	medium5.8	0.46% (39th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20356US	high7.5	0.44% (38th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20236US	high7.5	0.44% (38th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20043US	critical9.0	0.36% (30th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2017-6679US	medium6.4	0.34% (27th)	—	no fix	2017-12-01	—
CVE-2022-20805US	medium4.1OT elevated	0.18% (8th)	—	no fix	2022-04-21	2 versions
CVE-2026-76524US	high7.8OT elevated	0.18% (7th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20291US	high7.8	0.16% (5th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20246US	—	0.10% (1st)	—	no fix	2026-06-17	73 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write4 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File2 CVEs
CWE-128Wrap-around Error2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs
CWE-1039Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)13 CVEs
USCisco PSIRT (CSAF)11 CVEs
EUEU Vulnerability Database (ENISA)11 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan