PatchTheCVEsecurity agent vulnerabilities and fixes
Recent CVEs affecting security agent, with upgrade or downgrade steps. 14 tracked.
Also searched as: securityagent.
security agent has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2011-02-19. Highest priority: CVE-2011-0364 (score 64/100).
- CVE-2011-0364 HIGH 10.0 DOWNGRADE The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote
- CVE-2010-0148 HIGH 7.8 DOWNGRADE Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote a
- CVE-2010-0147 MEDIUM 6.5 DOWNGRADE SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 befor
- CVE-2010-0146 MEDIUM 6.8 DOWNGRADE Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authent
- CVE-2007-5580 HIGH 10.0 DOWNGRADE Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1
- CVE-2007-1068 HIGH 7.2 DOWNGRADE DOWNGRADE The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCH
- CVE-2007-1067 HIGH 7.2 DOWNGRADE DOWNGRADE Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when
- CVE-2007-1066 MEDIUM 6.8 DOWNGRADE DOWNGRADE Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when
- CVE-2007-1065 MEDIUM 6.8 DOWNGRADE DOWNGRADE Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when
- CVE-2007-1064 MEDIUM 6.8 DOWNGRADE DOWNGRADE Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when
- CVE-2006-5553 HIGH 7.8 DOWNGRADE MITIGATE Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallMan
- CVE-2005-2280 MEDIUM 5.0 DOWNGRADE Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a craft
- CVE-2005-1103 MEDIUM 4.6 DOWNGRADE Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy f
- CVE-2004-1112 MEDIUM 5.1 DOWNGRADE DOWNGRADE The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user
FAQ
How do I fix security agent vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is security agent being exploited right now?
None of the tracked security agent CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which security agent CVE should I patch first?
CVE-2011-0364 currently ranks highest (64/100): The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote.