Skip to content
OpenAdvisories

Vendor

Cisco

3,476 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

267 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-15975 Public exploit EPSS 96%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2019-15976 Public exploit EPSS 93%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2019-15260

    Cisco Aironet Access Points Unauthorized Access Vulnerability

    A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs o…

    Cisco Cisco Aironet Access Point Software Network devices
  • Critical 9.9
    CVE-2019-12648

    Cisco IOx for IOS Software Guest Operating System Unauthorized Access Vulnerability

    A vulnerability in the IOx application environment for Cisco IOS Software could allow an authenticated, remote attacker to gain unauthorized access to the Guest Operating System (Guest OS) running on an affected device. The vulnerability is due to incorrect r…

    Cisco Cisco IOS 15.7(3)M iOS Network devices
  • Critical 10.0
    CVE-2019-12643

    Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability

    A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed Cisco IOS XE device. The vulnerability is due to an improper check performed by t…

    Cisco Cisco IOS XE Software iOS Network devices
  • Critical 9.8
    CVE-2019-1938

    Cisco UCS Director and Cisco UCS Director Express for Big Data API Authentication Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrator privileges on an …

    Cisco Cisco Unified Computing System Director Network devices
  • Critical 9.8
    CVE-2019-1974

    Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass user authentication and…

    Cisco Cisco Unified Computing System Director Network devices
  • Critical 9.8
    CVE-2019-1935 Public exploit EPSS 83%

    Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability

    A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User accoun…

    Cisco Cisco Unified Computing System Director Network devices
  • Critical 9.8
    CVE-2019-1937 Public exploit EPSS 76%

    Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token …

    Cisco Cisco Unified Computing System Director Network devices
  • Critical 9.8
    CVE-2019-1895

    Cisco Enterprise NFV Infrastructure Software VNC Authentication Bypass Vulnerability

    A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to access the VNC console session of an administrative user on an affected de…

    Cisco Cisco Enterprise NFV Infrastructure Software Network devices
  • Critical 9.8
    CVE-2019-1913 Public exploit EPSS 26%

    Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities

    Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the unde…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • Critical 9.1
    CVE-2019-1912 Public exploit EPSS 17%

    Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability

    A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management inte…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • Critical 9.1
    CVE-2019-1917

    Cisco Vision Dynamic Signage Director REST API Authentication Bypass Vulnerability

    A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacke…

    Cisco Cisco Vision Dynamic Signage Director Network devices
  • Critical 9.8
    CVE-2019-1620 Public exploit EPSS 84%

    Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in aff…

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2019-1619 Public exploit EPSS 83%

    Cisco Data Center Network Manager Authentication Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The …

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.3
    CVE-2019-1848

    Cisco DNA Center Authentication Bypass Vulnerability

    A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability is due to insufficient access restriction to ports necessary…

    Cisco Cisco Digital Network Architecture Center (DNA Center) Network devices
  • Critical 10.0
    CVE-2019-1867 EPSS 30%

    Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability

    A vulnerability in the REST API of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to bypass authentication on the REST API. The vulnerability is due to improper validation of API requests. An attacker could exploit thi…

    Cisco Cisco Elastic Services Controller Network devices
  • Critical 9.8
    CVE-2019-1804

    Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability

    A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The…

    Cisco Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode 11.0.1b Network devices
  • Critical 9.8
    CVE-2019-1710

    Cisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability

    A vulnerability in the sysadmin virtual machine (VM) on Cisco ASR 9000 Series Aggregation Services Routers running Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to access internal applications running on the sysadmin VM. The vul…

    Cisco Cisco IOS XR Software iOS Network devices
  • Critical 9.8
    CVE-2019-1785

    Clam AntiVirus RAR Directory Traversal Vulnerability

    A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a…

    Cisco ClamAV clamav libclamunrar Network devices Debian
  • Critical 9.8
    CVE-2019-1723

    Cisco Common Services Platform Collector Static Credential Vulnerability

    A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. T…

    Cisco Cisco Common Services Platform Collector Software Network devices
  • Critical 9.8
    CVE-2019-1663 Public exploit EPSS 96%

    Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

    A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary co…

    Cisco RV110W Wireless-N VPN Firewall RV215W Wireless-N VPN Router RV130W Wireless-N Multifunction VPN Router Network devices
  • Critical 9.9
    CVE-2019-1651

    Cisco SD-WAN Solution Buffer Overflow Vulnerability

    A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and execute arbitrary code as the root user. The vulnerability is due to improper bounds checking by the …

    Cisco Cisco SD-WAN Solution Network devices
  • Critical 9.4
    CVE-2018-15441

    Cisco Prime License Manager SQL Injection Vulnerability

    A vulnerability in the web framework code of Cisco Prime License Manager (PLM) could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation of user-supplied input in SQL queries. An …

    Cisco Cisco Prime License Manager Network devices
  • Critical 9.8
    CVE-2018-15381 EPSS 87%

    Cisco Unity Express Arbitrary Command Execution Vulnerability

    A Java deserialization vulnerability in Cisco Unity Express (CUE) could allow an unauthenticated, remote attacker to execute arbitrary shell commands with the privileges of the root user. The vulnerability is due to insecure deserialization of user-supplied c…

    Cisco Cisco Unity Express Network devices
  • Critical 9.8
    CVE-2018-15394

    Cisco Stealthwatch Management Console Authentication Bypass Vulnerability

    A vulnerability in the Stealthwatch Management Console (SMC) of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vuln…

    Cisco Cisco Stealthwatch Enterprise Network devices
  • Critical 9.8
    CVE-2018-15439 Public exploit EPSS 50%

    Cisco Small Business Switches Privileged Access Vulnerability

    A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected softwa…

    Cisco Cisco Small Business 300 Series Managed Switches Network devices