Skip to content
OpenAdvisories

Vendor

Cisco

3,476 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

1,160 results · Clear filters · Feed

  • High 7.4
    CVE-2019-1659

    Cisco Prime Infrastructure Certificate Validation Vulnerability

    A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established betwee…

    Cisco Cisco Prime Infrastructure Network devices
  • High 8.8
    CVE-2018-15380

    Cisco HyperFlex Software Command Injection Vulnerability

    A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an unauthenticated, adjacent attacker to execute commands as the root user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulner…

    Cisco Cisco HyperFlex HX-Series Network devices
  • High 7.7
    CVE-2019-1688

    Cisco Network Assurance Engine CLI Access with Default Password Vulnerability

    A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service (DoS) condition on the server. The vulnerability is due to a fault …

    Cisco Cisco Network Assurance Engine Network devices
  • High 7.5
    CVE-2019-1675

    Cisco Aironet Active Sensor Static Credentials Vulnerability

    A vulnerability in the default configuration of the Cisco Aironet Active Sensor could allow an unauthenticated, remote attacker to restart the sensor. The vulnerability is due to a default local account with a static password. The account has privileges only …

    Cisco Cisco Aironet Active Sensor Network devices
  • High 8.6
    CVE-2019-1669

    Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability

    A vulnerability in the data acquisition (DAQ) component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service (DoS) condition. The vulnerabili…

    Cisco Cisco Firepower Threat Defense Software Network devices
  • High 7.2
    CVE-2019-1652 Exploited Public exploit EPSS 96%

    Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vu…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • High 7.5
    CVE-2019-1653 Exploited Public exploit Scanner template EPSS 100%

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls …

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Nov 3, 2021
  • High 7.8
    CVE-2019-1648

    Cisco SD-WAN Solution Privilege Escalation Vulnerability

    A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included…

    Cisco Cisco SD-WAN Solution Network devices
  • High 7.8
    CVE-2019-1646

    Privilege Escalation Vulnerability in Cisco SD-WAN Solution

    A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files. The vulnerability exists because user input is not properly sanitized for certain commands…

    Cisco Cisco SD-WAN Solution Network devices
  • High 8.0
    CVE-2019-1647

    Cisco SD-WAN Solution Unauthorized Access Vulnerability

    A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to other vSmart containers. The vulnerability is due to an insecure default configuration of the affected…

    Cisco Cisco SD-WAN Solution Network devices
  • High 8.8
    CVE-2019-1650

    Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability

    A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the save command in the …

    Cisco Cisco SD-WAN Solution Network devices
  • High 7.8
    CVE-2019-1641

    Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • High 7.5
    CVE-2019-1644

    Cisco IoT Field Network Director Resource Exhaustion Denial of Service Vulnerability

    A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service (DoS) condition. The vulnerability is due to improp…

    Cisco Cisco IoT Field Network Director (IoT-FND) Network devices
  • High 7.8
    CVE-2019-1640

    Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • High 7.8
    CVE-2019-1638

    Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • High 7.8
    CVE-2019-1637

    Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • High 7.8
    CVE-2019-1639

    Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • High 7.8
    CVE-2019-1636 EPSS 47%

    Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability

    A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows operatin…

    Cisco Cisco Webex Teams Network devices
  • High 8.6
    CVE-2018-15460

    Cisco Email Security Appliance URL Filtering Denial of Service Vulnerability

    A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service (Do…

    Cisco Cisco Email Security Appliance (ESA) Network devices
  • High 8.6
    CVE-2018-15453

    Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability

    A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacke…

    Cisco Cisco Email Security Appliance (ESA) Network devices
  • High 7.3
    CVE-2018-0181

    Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent Software Redis Server Unauthenticated Access Vulnerability

    A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis s…

    Cisco Cisco Policy Suite (CPS) Software Network devices
  • High 8.1
    CVE-2018-15465

    Cisco Adaptive Security Appliance Software Privilege Escalation Vulnerability

    A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, but unprivileged (levels 0 and 1), remote attacker to perform privileged actions by using the web management interface. The vulner…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.6
    CVE-2018-15454

    Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerability

    A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to rel…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 7.8
    CVE-2018-15442 Public exploit EPSS 16%

    Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

    A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied paramet…

    Cisco Cisco WebEx Event Center Network devices
  • High 7.4
    CVE-2018-0441

    Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability

    A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a corruption…

    Cisco Cisco Aironet Access Point Software Network devices
  • High 7.5
    CVE-2018-0417

    Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability

    A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that user on the CLI. The vulnerability is …

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • High 8.6
    CVE-2018-0443

    Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points Protocol Denial of Service Vulnerability

    A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerabili…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • High 7.5
    CVE-2018-0442

    Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points Protocol Information Disclosure Vulnerability

    A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to retrieve memory contents, which could lead to the disclosu…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • High 8.6
    CVE-2018-0378

    Cisco NX-OS Software for Nexus 5500, 5600, and 6000 Series Switches Precision Time Protocol Denial of Service Vulnerability

    A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. T…

    Cisco Cisco NX-OS Software for Nexus 6000 Series Network devices
  • High 7.7
    CVE-2018-0456

    Cisco NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability

    A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application of an affected device to restart unexpectedly. The vulnerability is due…

    Cisco Cisco NX-OS Software for Nexus 3000 Series 7.0(3)I7(3) Network devices
  • High 8.8
    CVE-2018-0395

    Cisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability

    A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when the device unexpectedly reloads. Th…

    Cisco Cisco NX-OS Software Firepower 4100 Series Next-Generation Firewalls Network devices
  • High 7.5
    CVE-2018-3839

    An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer…

    Cisco Simple DirectMedia sdl-image1.2 libsdl2-image Network devices Debian Ubuntu Alpine
  • High 8.8
    CVE-2017-6740 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6743 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6744 Exploited

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6737 Exploited EPSS 45%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IOS iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6738 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco Cisco IOS XE Software IOS iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6736 Exploited Public exploit EPSS 70%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6742 Exploited Public exploit EPSS 21%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IntelliShield Cisco IOS XE Software Universal Product iOS Network devices
    KEV Apr 19, 2023
  • High 8.8
    CVE-2017-6741

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IntelliShield Cisco IOS XE Software Universal Product iOS Network devices