Skip to content
OpenAdvisories

Vendor

Cisco

3,476 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

3,476 results · Feed

  • Medium 5.8
    CVE-2020-3190

    Cisco IOS XR Software IPsec Packet Processor Denial of Service Vulnerability

    A vulnerability in the IPsec packet processor of Cisco IOS XR Software could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition for IPsec sessions to an affected device. The vulnerability is due to improper handling of packe…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 4.8
    CVE-2020-3185

    Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerabi…

    Cisco Cisco TelePresence Management Suite (TMS) Network devices
  • Medium 4.3
    CVE-2020-3182

    Cisco Webex Meetings Client for MacOS Information Disclosure Vulnerability

    A vulnerability in the multicast DNS (mDNS) protocol configuration of Cisco Webex Meetings Client for MacOS could allow an unauthenticated adjacent attacker to obtain sensitive information about the device on which the Webex client is running. The vulnerabili…

    Cisco Cisco Webex Meetings Network devices
  • Medium 6.5
    CVE-2020-3181

    Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability

    A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection (AMP) in Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated remote attacker to exhaust resources on an affected device. T…

    Cisco Cisco Email Security Appliance (ESA) Network devices
  • Medium 4.2
    CVE-2020-3166

    Cisco FXOS Software CLI Arbitrary File Read and Write Vulnerability

    A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An attacker could exploit this …

    Cisco Cisco Firepower Extensible Operating System (FXOS) Network devices
  • High 7.8
    CVE-2020-3167

    Cisco FXOS and UCS Manager Software CLI Command Injection Vulnerability

    A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 7.5
    CVE-2020-3168

    Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability

    A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module (VSM) to become inaccessible to users through…

    Cisco Cisco NX-OS Software Network devices
  • Medium 6.7
    CVE-2020-3169

    Cisco FXOS Software CLI Command Injection Vulnerability

    A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root on an affected device. The vulnerability is due to insufficien…

    Cisco Cisco Firepower Extensible Operating System (FXOS) Network devices
  • Medium 5.3
    CVE-2020-3170

    Cisco NX-OS Software NX-API Denial of Service Vulnerability

    A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is s…

    Cisco Cisco NX-OS Software 7.3(2)D1(1d) Network devices
  • High 7.8
    CVE-2020-3171

    Cisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability

    A vulnerability in the local management (local-mgmt) CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device. The vulner…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.8
    CVE-2020-3172

    Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability

    A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (DoS) condition on an affected device. The…

    Cisco Cisco Unified Computing System (Managed) Network devices
  • High 7.8
    CVE-2020-3173

    Cisco UCS Manager Software Local Management CLI Command Injection Vulnerability

    A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) on an affected device. The vulnerability is due to insuff…

    Cisco Cisco Unified Computing System (Managed) Network devices
  • Medium 4.7
    CVE-2020-3174

    Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability

    A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol (ARP) entries. The ARP entries are for nonlocal IP addresses for the subnet…

    Cisco Cisco NX-OS Software 7.3(2)D1(1d) Network devices
  • High 8.6
    CVE-2020-3175

    Cisco MDS 9000 Series Multilayer Switches Denial of Service Vulnerability

    A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due …

    Cisco Cisco NX-OS Software 5.0(1a) Network devices
  • High 8.2
    CVE-2020-3165

    Cisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass Vulnerability

    A vulnerability in the implementation of Border Gateway Protocol (BGP) Message Digest 5 (MD5) authentication in Cisco NX-OS Software could allow an unauthenticated, remote attacker to bypass MD5 authentication and establish a BGP connection with the device. T…

    Cisco Cisco NX-OS Software Network devices
  • High 8.4
    CVE-2019-1950

    Cisco IOS XE SD-WAN Software Default Credentials Vulnerability

    A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected …

    Cisco Cisco IOS XE SD-WAN Software iOS Network devices
  • Medium 4.8
    CVE-2020-3113

    Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerabil…

    Cisco Cisco Data Center Network Manager Network devices
  • High 8.8
    CVE-2020-3112

    Cisco Data Center Network Manager Privilege Escalation Vulnerability

    A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due to insufficient access control validation. An attacker could …

    Cisco Cisco Data Center Network Manager Network devices
  • High 8.8
    CVE-2020-3114

    Cisco Data Center Network Manager Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insuffic…

    Cisco Cisco Data Center Network Manager Network devices
  • Medium 6.8
    CVE-2020-3132

    Cisco Email Security Appliance Shortened URL Denial of Service Vulnerability

    A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of service (DoS) condition on an affected device. The vulnerab…

    Cisco Cisco Email Security Appliance (ESA) Network devices
  • Unscored —
    CVE-2020-3138

    Cisco Enterprise NFV Infrastructure Software Remote Code Execution Vulnerability

    A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to install a malicious file when upgrading. The vulnerability is due to insufficient signature validation. An attacke…

    Cisco Network devices
  • Medium 6.5
    CVE-2020-3153 Exploited · Ransomware Public exploit EPSS 29%

    Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

    A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
    KEV Oct 24, 2022
  • Medium 4.9
    CVE-2020-3154

    Cisco Cloud Web Security SQL Injection Vulnerability

    A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web-based management interface improperly validates SQL values. An authenticat…

    Cisco Cisco Cloud Web Security Network devices
  • Medium 6.1
    CVE-2020-3156

    Cisco Identity Services Engine Cross-Site Scripting Vulnerability

    A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the …

    Cisco Cisco Identity Services Engine Software Network devices
  • Critical 9.8
    CVE-2020-3158

    Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

    A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account…

    Cisco Cisco Smart Software Manager On-Prem Network devices
  • Medium 6.1
    CVE-2020-3159

    Cisco Finesse Web-Based Management Interface Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerabil…

    Cisco Cisco Finesse Network devices
  • Medium 5.3
    CVE-2020-3160

    Cisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerability

    A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications. Other a…

    Cisco Cisco Meeting Server Network devices
  • Medium 6.8
    CVE-2020-3163

    Cisco Unified Contact Center Enterprise Denial of Service Vulnerability

    A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software impro…

    Cisco Cisco Unified Contact Center Enterprise Network devices
  • Medium 4.3
    CVE-2011-2054

    Cisco ASA Secondary Authentication Bypass Vulnerability

    A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. …

    Cisco Cisco ASA Network devices
  • Medium 4.3
    CVE-2015-0749

    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

    A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters pass…

    Cisco Cisco Unified Communications Manager Network devices
  • Unscored —
    CVE-2011-4661

    A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (…

    Cisco IOS iOS Network devices
  • Unscored —
    CVE-2013-1202

    Cisco ACE A2(3.6) allows log retention DoS.

    Cisco Cisco ACE Network devices
  • High 7.4
    CVE-2020-3120

    Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 4.8
    CVE-2020-3149

    Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected device. The vulnerability is due to insuf…

    Cisco Cisco Identity Services Engine Software Network devices
  • High 8.8
    CVE-2020-3119

    Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability exists because the Cisco Discovery P…

    Cisco Cisco Unified Computing System (Managed) Network devices
  • High 8.8
    CVE-2020-3118 Exploited EPSS 12%

    Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of st…

    Cisco Cisco IOS XR Software iOS Network devices
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-3111

    Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missin…

    Cisco Cisco IP phone Network devices
  • High 8.8
    CVE-2020-3110

    Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for the Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP Camera. The vulnerability is …

    Cisco Cisco Video Surveillance 8000 Series IP Cameras Network devices
  • High 7.5
    CVE-2020-3123

    A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine
  • Medium 5.4
    CVE-2019-15253 Public exploit

    Cisco Digital Network Architecture Center Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface o…

    Cisco Cisco Digital Network Architecture Center (DNA Center) Network devices