Skip to content
OpenAdvisories

Vendor

Cisco

3,476 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

1,160 results · Clear filters · Feed

  • High 7.5
    CVE-2019-12656

    Cisco IOx Application Environment Denial of Service Vulnerability

    A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a denial of service (DoS) condition. The vulnerability i…

    Cisco Cisco Industrial Routers Operating System Software Network devices
  • High 8.6
    CVE-2019-12658

    Cisco IOS XE Software Filesystem Exhaustion Denial of Service Vulnerability

    A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected device and cause a denial of service (DoS) condition. The vulnerability is due t…

    Cisco Cisco IOS XE Software 16.1.1 iOS Network devices
  • High 8.6
    CVE-2019-12652

    Cisco Catalyst 4000 Series Switches TCP Denial of Service Vulnerability

    A vulnerability in the ingress packet processing function of Cisco IOS Software for Cisco Catalyst 4000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is du…

    Cisco Cisco IOS 15.0(1)XO1 iOS Network devices
  • High 8.6
    CVE-2019-12654

    Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability

    A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerabi…

    Cisco Cisco IOS 15.0(1)XA2 iOS Network devices
  • High 8.6
    CVE-2019-12657

    Cisco IOS XE Software Unified Threat Defense Denial of Service Vulnerability

    A vulnerability in Unified Threat Defense (UTD) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper validation of IPv6 packets through the UTD feature. An attacke…

    Cisco Cisco IOS XE Software 3.16.0S iOS Network devices
  • High 8.6
    CVE-2019-12655

    Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability

    A vulnerability in the FTP application layer gateway (ALG) functionality used by Network Address Translation (NAT), NAT IPv6 to IPv4 (NAT64), and the Zone-Based Policy Firewall (ZBFW) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to…

    Cisco Cisco IOS XE Software 3.16.8S iOS Network devices
  • High 8.6
    CVE-2019-12653

    Cisco IOS XE Software Raw Socket Transport Denial of Service Vulnerability

    A vulnerability in the Raw Socket Transport feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper pars…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.6
    CVE-2019-12651

    Cisco IOS XE Software Web UI Command Injection Vulnerabilities

    Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see…

    Cisco Cisco IOS XE Software 3.2.11aSG iOS Network devices
  • High 8.6
    CVE-2019-12647

    Cisco IOS and IOS XE Software IP Ident Denial of Service Vulnerability

    A vulnerability in the Ident protocol handler of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability exists because the affected software incorrectly handles memory structures,…

    Cisco Cisco IOS iOS Network devices
  • High 7.6
    CVE-2019-12650 EPSS 26%

    Cisco IOS XE Software Web UI Command Injection Vulnerabilities

    Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see…

    Cisco Cisco IOS XE Software 3.2.11aSG iOS Network devices
  • High 8.6
    CVE-2019-12646

    Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability

    A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.5
    CVE-2019-1939

    Cisco Webex Teams Logging Feature Command Execution Vulnerability

    A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the applic…

    Cisco Cisco Webex Teams Network devices
  • High 7.5
    CVE-2019-1976

    Cisco Industrial Network Director Configuration Data Information Disclosure Vulnerability

    A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access…

    Cisco Cisco Industrial Network Director Network devices
  • High 7.8
    CVE-2019-1966

    Cisco Unified Computing System Fabric Interconnect root Privilege Escalation Vulnerability

    A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to gain elevated privileges as the root user on an affected device. The vulnerab…

    Cisco Cisco Unified Computing System (Managed) Network devices
  • High 8.6
    CVE-2019-1967

    Cisco NX-OS Software Network Time Protocol Denial of Service Vulnerability

    A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to excessive use of system resource…

    Cisco Cisco NX-OS Software Network devices
  • High 8.6
    CVE-2019-1964

    Cisco NX-OS Software IPv6 Denial of Service Vulnerability

    A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an affected device. The vulnerability is due to improper validation of IPv6 traffi…

    Cisco Cisco NX-OS Software 8.1(1) Network devices
  • High 7.7
    CVE-2019-1965

    Cisco NX-OS Software Remote Management Memory Leak Denial of Service Vulnerability

    A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can depl…

    Cisco Cisco NX-OS Software Network devices
  • High 8.6
    CVE-2019-1962

    Cisco NX-OS Software Cisco Fabric Services over IP Denial of Service Vulnerability

    A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a denial of service (DoS) condition on an affected system. The vulnerability is due to…

    Cisco Cisco Unified Computing System (Managed) Network devices
  • High 7.7
    CVE-2019-1963

    Cisco FXOS and NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability

    A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. …

    Cisco Cisco Unified Computing System (Managed) Network devices
  • High 8.8
    CVE-2019-1907

    Cisco Integrated Management Controller Substring Comparison Privilege Escalation Vulnerability

    A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to set sensitive configuration values and gain elevated privileges. The vulnerability is due to improper handling of substring comp…

    Cisco Cisco Unified Computing System (Management Software) Network devices
  • High 7.5
    CVE-2019-1908

    Cisco Integrated Management Controller Information Disclosure Vulnerability

    A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to view sensitive system information. The vulnerability is due to insufficie…

    Cisco Cisco Unified Computing System (Management Software) Network devices
  • High 7.2
    CVE-2019-1936 Public exploit EPSS 39%

    Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attacker to execute arbitrary commands on th…

    Cisco Cisco Unified Computing System Director Network devices
  • High 7.0
    CVE-2019-1883

    Cisco Integrated Management Controller CLI Command Injection Vulnerability

    A vulnerability in the command-line interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker with read-only credentials to inject arbitrary commands that could allow them to obtain root privileges. The vulnerabili…

    Cisco Cisco Unified Computing System E-Series Software (UCSE) Network devices
  • High 7.2
    CVE-2019-1885

    Cisco Integrated Management Controller Command Injection Vulnerability

    A vulnerability in the Redfish protocol of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on an affected device. The vulnerability is due to insufficient…

    Cisco Cisco Unified Computing System (Management Software) Network devices
  • High 7.2
    CVE-2019-1896

    Cisco Integrated Management Controller CSR Generation Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands and obtain root privileges. The vulnerability is due to insufficient validation of…

    Cisco Cisco Unified Computing System E-Series Software (UCSE) Network devices
  • High 7.5
    CVE-2019-1900

    Cisco Integrated Management Controller Unauthenticated Denial of Service Vulnerability

    A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web server process to crash, causing a denial of service (DoS) condition on an affected system. The vulnerability is…

    Cisco Cisco Unified Computing System (Management Software) Network devices
  • High 8.8
    CVE-2019-1864

    Cisco Integrated Management Controller Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on an affected device. The vulnera…

    Cisco Cisco Unified Computing System E-Series Software (UCSE) Network devices
  • High 8.8
    CVE-2019-1865

    Cisco Integrated Management Controller Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on an affected device. The vulnera…

    Cisco Cisco Unified Computing System E-Series Software (UCSE) Network devices
  • High 7.2
    CVE-2019-1871

    Cisco Integrated Management Controller Buffer Overflow Vulnerability

    A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and implement arbitrary commands with root privileges on a…

    Cisco Cisco Unified Computing System (Management Software) Network devices
  • High 7.2
    CVE-2019-1634

    Cisco Integrated Management Controller Command Injection Vulnerability

    A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on the underlying operati…

    Cisco Cisco Unified Computing System E-Series Software (UCSE) Network devices
  • High 7.2
    CVE-2019-1850

    Cisco Integrated Management Controller Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on an affected device. An attacker…

    Cisco Cisco Unified Computing System E-Series Software (UCSE) Network devices
  • High 8.8
    CVE-2019-12624 Public exploit EPSS 18%

    Cisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected …

    Cisco Cisco IOS XE Software iOS Network devices
  • High 8.6
    CVE-2019-12634

    Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Denial of Service Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to cause a denial of service (DoS…

    Cisco Cisco Unified Computing System Director Network devices
  • High 8.1
    CVE-2019-1971

    Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability

    A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary commands with root privileges. The vulnerability is due to in…

    Cisco Cisco Enterprise NFV Infrastructure Software Network devices
  • High 7.8
    CVE-2019-1928

    Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

    Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected softwar…

    Cisco Cisco WebEx WRF Player Network devices
  • High 7.8
    CVE-2019-1929

    Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

    Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected softwar…

    Cisco Cisco WebEx WRF Player Network devices
  • High 8.8
    CVE-2019-1934

    Cisco Adaptive Security Appliance Software Web-Based Management Interface Privilege Escalation Vulnerability

    A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device. The vulnerability is due …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 7.8
    CVE-2019-1926

    Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

    Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected softwar…

    Cisco Cisco WebEx WRF Player Network devices
  • High 7.8
    CVE-2019-1927

    Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

    Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected softwar…

    Cisco Cisco WebEx WRF Player Network devices
  • High 7.4
    CVE-2019-1918

    Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability

    A vulnerability in the implementation of Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of se…

    Cisco Cisco IOS XR Software iOS Network devices