CVE-2021-1483

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. This vulnerability is due to improper handling of XML External Entity (XXE) entries when the affected software parses certain XML files. An attacker could exploit this vulnerability by persuading a user to import a crafted XML file with malicious entries. A successful exploit could allow the attacker to read and write files within the affected application.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

• CWE-611

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-cmdinj-nRHKgfHXNot Applicable
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-xml-ext-entity-q6Z7uVUgVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-info-disclos-gGvm9MfuNot Applicable

Published

Nov 15, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1477A vulnerability in an access control mechanism of Cisco Fire…4.3
• CVE-2021-1478A vulnerability in the Java Management Extensions (JMX) comp…6.5
• CVE-2021-1479Multiple vulnerabilities in Cisco SD-WAN vManage Software co…9.8
• CVE-2021-1480Multiple vulnerabilities in Cisco SD-WAN vManage Software co…7.8
• CVE-2021-1481A vulnerability in the web-based management interface of Cis…4.3
• CVE-2021-1482A vulnerability in the web-based management interface of Cis…6.4
• CVE-2021-1484A vulnerability in the web UI of Cisco SD-WAN vManage S…6.5
• CVE-2021-1485A vulnerability in the CLI of Cisco IOS XR Software could al…7.8
• CVE-2021-1486A vulnerability in Cisco SD-WAN vManage Software could allow…5.3
• CVE-2021-1487A vulnerability in the web-based management interface of Cis…8.8
• CVE-2021-1488A vulnerability in the upgrade process of Cisco Adaptive Sec…6.7
• CVE-2021-1489A vulnerability in filesystem usage management for Cisco Fir…6.5