Skip to content
OpenAdvisories

Vendor

Cisco

3,476 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

27 results · Clear filters · Feed

  • High 8.6
    CVE-2026-76418 Exploited

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unex…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Network devices
    KEV Oct 29, 2026
  • High 7.5
    CVE-2026-20320 Exploited

    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remot…

    Cisco Cisco BroadWorks Network devices
    KEV Nov 10, 2026
  • High 8.6
    CVE-2026-20349 Exploited Public exploit

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

    A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload une…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Network devices
    KEV Aug 11, 2026
  • High 7.8
    CVE-2026-20245 Exploited Public exploit EPSS 25%

    Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
    KEV Jun 9, 2026
  • High 8.6
    CVE-2026-20230 Exploited Public exploit EPSS 89%

    Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks thr…

    Cisco Cisco Unified Communications Manager Network devices
    KEV Jun 25, 2026
  • High 7.5
    CVE-2026-20128 Exploited

    Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

    A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for t…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Apr 20, 2026
  • High 8.2
    CVE-2026-20045 Exploited Public exploit

    Cisco Unified Communications Products Remote Code Execution Vulnerability

    A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connectio…

    Cisco Cisco Unified Communications Manager Cisco Unity Connection Cisco Unified Communications Manager IM and Presence Service Network devices
    KEV Jan 21, 2026
  • High 7.7
    CVE-2025-20352 Exploited Public exploit EPSS 41%

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Softw…

    Cisco Cisco IOS XE Software IOS Cisco IOS XE Catalyst SD-WAN iOS Network devices
    KEV Sep 29, 2025
  • High 8.6
    CVE-2024-20353 Exploited EPSS 70%

    A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Fi…

    Cisco Cisco Firepower Threat Defense Software Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Apr 24, 2024
  • High 7.2
    CVE-2023-20273 Exploited Public exploit EPSS 93%

    A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject …

    Cisco Cisco IOS XE Software iOS Network devices
    KEV Oct 23, 2023
  • High 7.8
    CVE-2022-20775 Exploited EPSS 12%

    Cisco SD-WAN Software Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerab…

    Cisco Cisco Catalyst SD-WAN Manager Cisco SD-WAN vEdge Router Cisco SD-WAN vEdge Cloud Network devices
    KEV Feb 25, 2026
  • High 8.6
    CVE-2020-3569 Exploited

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities

    Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it co…

    Cisco Cisco IOS XR Software iOS Network devices
    KEV Nov 3, 2021
  • High 8.6
    CVE-2020-3566 Exploited

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue manageme…

    Cisco Cisco IOS XR Software iOS Network devices
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-3433 Exploited · Ransomware Public exploit EPSS 10%

    Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to ha…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
    KEV Oct 24, 2022
  • High 7.5
    CVE-2020-3452 Exploited Public exploit Scanner template EPSS 100%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-3259 Exploited · Ransomware EPSS 72%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Feb 15, 2024
  • High 8.8
    CVE-2020-3118 Exploited EPSS 12%

    Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of st…

    Cisco Cisco IOS XR Software iOS Network devices
    KEV Nov 3, 2021
  • High 8.8
    CVE-2019-15271 Exploited

    Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability

    A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an ac…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Jun 8, 2022
  • High 7.2
    CVE-2019-1652 Exploited Public exploit EPSS 96%

    Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vu…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • High 7.5
    CVE-2019-1653 Exploited Public exploit Scanner template EPSS 100%

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls …

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Nov 3, 2021
  • High 8.8
    CVE-2017-6740 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6743 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6744 Exploited

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6737 Exploited EPSS 45%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IOS iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6738 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco Cisco IOS XE Software IOS iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6736 Exploited Public exploit EPSS 70%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6742 Exploited Public exploit EPSS 21%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IntelliShield Cisco IOS XE Software Universal Product iOS Network devices
    KEV Apr 19, 2023