Skip to content
OpenAdvisories

Vendor

Cisco

3,476 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

122 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-3161 Exploited Public exploit EPSS 84%

    Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

    A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to…

    Cisco Cisco IP phone Network devices
    KEV Nov 3, 2021
  • Medium 6.5
    CVE-2020-3153 Exploited · Ransomware Public exploit EPSS 29%

    Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

    A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
    KEV Oct 24, 2022
  • Medium 5.4
    CVE-2019-15253 Public exploit

    Cisco Digital Network Architecture Center Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface o…

    Cisco Cisco Digital Network Architecture Center (DNA Center) Network devices
  • Critical 9.8
    CVE-2019-15977 Public exploit EPSS 38%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • High 7.2
    CVE-2019-15978 Public exploit EPSS 37%

    Cisco Data Center Network Manager Command Injection Vulnerabilities

    Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operati…

    Cisco Cisco Data Center Network Manager Network devices
  • High 7.2
    CVE-2019-15984 Public exploit EPSS 47%

    Cisco Data Center Network Manager SQL Injection Vulnerabilities

    Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would …

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 5.4
    CVE-2019-15999 Public exploit

    Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability

    A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain unauthorized access to the JBoss Enterprise Application Platform (JBoss EAP) on an affected device. The vulnerabil…

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2019-15975 Public exploit EPSS 96%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2019-15976 Public exploit EPSS 93%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 5.4
    CVE-2019-15972 Public exploit

    Cisco Unified Communications Manager SQL Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management inter…

    Cisco Cisco Unified Communications Manager Network devices
  • High 7.7
    CVE-2019-15276 Public exploit EPSS 46%

    Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability

    A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists due to a failure of the HT…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Medium 5.8
    CVE-2019-1978 Public exploit

    Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability

    A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protec…

    Cisco Cisco Firepower Threat Defense Software Network devices
  • Critical 9.8
    CVE-2019-1935 Public exploit EPSS 83%

    Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability

    A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User accoun…

    Cisco Cisco Unified Computing System Director Network devices
  • High 7.2
    CVE-2019-1936 Public exploit EPSS 39%

    Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attacker to execute arbitrary commands on th…

    Cisco Cisco Unified Computing System Director Network devices
  • Critical 9.8
    CVE-2019-1937 Public exploit EPSS 76%

    Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token …

    Cisco Cisco Unified Computing System Director Network devices
  • High 8.8
    CVE-2019-12624 Public exploit EPSS 18%

    Cisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected …

    Cisco Cisco IOS XE Software iOS Network devices
  • Critical 9.8
    CVE-2019-1913 Public exploit EPSS 26%

    Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities

    Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the unde…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • High 7.2
    CVE-2019-1914 Public exploit EPSS 25%

    Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability

    A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. …

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • Critical 9.1
    CVE-2019-1912 Public exploit EPSS 17%

    Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability

    A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management inte…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • Medium 4.7
    CVE-2019-1943 Public exploit Scanner template

    Cisco Small Business Series Switches Open Redirect Vulnerability

    A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the pa…

    Cisco Cisco Small Business 300 Series Managed Switches Network devices
  • Critical 9.8
    CVE-2019-1620 Public exploit EPSS 84%

    Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in aff…

    Cisco Cisco Data Center Network Manager Network devices
  • High 7.5
    CVE-2019-1621 Public exploit EPSS 30%

    Cisco Data Center Network Manager Arbitrary File Download Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settin…

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 5.3
    CVE-2019-1622 Public exploit EPSS 79%

    Cisco Data Center Network Manager Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls f…

    Cisco Cisco Data Center Network Manager Network devices
  • Critical 9.8
    CVE-2019-1619 Public exploit EPSS 83%

    Cisco Data Center Network Manager Authentication Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The …

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 4.7
    CVE-2019-1881 Public exploit

    Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vul…

    Cisco Cisco Industrial Network Director Network devices
  • High 8.8
    CVE-2019-1821 Public exploit Scanner template EPSS 98%

    Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities

    A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating …

    Cisco Cisco Prime Infrastructure Network devices
  • Medium 5.3
    CVE-2019-1759 Public exploit

    Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability

    A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface.…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.4
    CVE-2019-1749 Public exploit

    Cisco Aggregation Services Router 900 Route Switch Processor 3 OSPFv2 Denial of Service Vulnerability

    A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router (ASR) 900 Route Switch Processor 3 (RSP3) could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting i…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.8
    CVE-2019-1674 Public exploit

    Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability

    A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient …

    Cisco Cisco Webex Meetings Desktop App Cisco Webex Productivity Tools Network devices
  • Critical 9.8
    CVE-2019-1663 Public exploit EPSS 96%

    Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

    A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary co…

    Cisco RV110W Wireless-N VPN Firewall RV215W Wireless-N VPN Router RV130W Wireless-N Multifunction VPN Router Network devices
  • Medium 4.9
    CVE-2019-1698 Public exploit

    Cisco IoT Field Network Director XML External Entity Vulnerability

    A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is d…

    Cisco Cisco IoT Field Network Director (IoT-FND) Network devices
  • High 7.2
    CVE-2019-1652 Exploited Public exploit EPSS 96%

    Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vu…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • High 7.5
    CVE-2019-1653 Exploited Public exploit Scanner template EPSS 100%

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls …

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Nov 3, 2021
  • Medium 6.1
    CVE-2019-1642 Public exploit

    Cisco Firepower Management Center Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of th…

    Cisco Cisco Firepower Management Center Network devices
  • Critical 9.8
    CVE-2018-15439 Public exploit EPSS 50%

    Cisco Small Business Switches Privileged Access Vulnerability

    A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected softwa…

    Cisco Cisco Small Business 300 Series Managed Switches Network devices
  • Medium 5.5
    CVE-2018-15437 Public exploit

    Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability

    A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow execut…

    Cisco Cisco AMP for Endpoints Network devices
  • High 7.8
    CVE-2018-15442 Public exploit EPSS 16%

    Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

    A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied paramet…

    Cisco Cisco WebEx Event Center Network devices
  • Unscored —
    CVE-2018-0437 Public exploit

    Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability

    A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vul…

    Cisco Cisco Umbrella Network devices
  • Unscored —
    CVE-2018-0438 Public exploit

    Cisco Umbrella Enterprise Roaming Client Privilege Escalation Vulnerability

    A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vul…

    Cisco Cisco Umbrella Network devices
  • Unscored —
    CVE-2018-15379 Public exploit EPSS 86%

    Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability

    A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file. This file could allow the attacker to execute commands at the …

    Cisco Cisco Prime Infrastructure Network devices