Cisco Cisco Smart Software Manager On-Prem

Name: Cisco Cisco Smart Software Manager On-Prem
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical6high4medium0low

updated 2026-10-27

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-20419US	—	80.9% (100th)	Exploit	no fix	2024-07-17	2 versions
CVE-2023-20110US	medium6.5	1.15% (67th)	Exploit	no fix	2023-05-18	2 versions
CVE-2021-1140US	critical9.8	4.44% (91st)	—	no fix	2021-01-20	2 versions
CVE-2021-1138US	critical9.8	4.44% (91st)	—	no fix	2021-01-20	2 versions
CVE-2021-1142US	critical9.8	4.40% (91st)	—	no fix	2021-01-20	2 versions
CVE-2021-1141US	high8.8	4.01% (91st)	—	no fix	2021-01-20	2 versions
CVE-2021-1139US	high8.8	4.01% (91st)	—	no fix	2021-01-20	2 versions
CVE-2020-3158US	critical9.1OT elevated	2.58% (85th)	—	n/a	2020-02-19	2 versions
CVE-2020-3443US	high8.8OT elevated	1.79% (78th)	—	no fix	2020-08-26	2 versions
CVE-2021-1222US	high8.1	1.26% (70th)	—	no fix	2021-01-20	2 versions
CVE-2020-3245US	medium5.3OT elevated	1.21% (68th)	—	no fix	2020-06-18	2 versions
CVE-2019-16029US	critical9.1	1.07% (65th)	—	n/a	2020-01-26	2 versions
CVE-2022-20808US	medium6.5	1.02% (63rd)	—	no fix	2022-07-06	2 versions
CVE-2021-34766US	high8.8	0.97% (62nd)	—	no fix	2021-10-06	2 versions
CVE-2026-20160US	—	0.91% (60th)	—	no fix	2026-04-01	5 versions
CVE-2022-20939US	—	0.61% (49th)	—	no fix	2024-11-15	18 versions
CVE-2021-1218US	medium5.4	0.57% (47th)	—	no fix	2021-01-20	2 versions
CVE-2026-20151US	—	0.27% (19th)	—	no fix	2026-04-01	29 versions
CVE-2021-1219US	high7.8OT elevated	0.26% (18th)	—	no fix	2021-01-20	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation6 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5 CVEs
CWE-798Use of Hard-coded Credentials2 CVEs
CWE-862Missing Authorization2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.