Skip to content
OpenAdvisories

Vendor

Cisco

3,476 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

3,476 results · Feed

  • High 8.6
    CVE-2019-15256

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability

    A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected dev…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Medium 6.1
    CVE-2019-12715

    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

    A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against…

    Cisco Cisco Unified Communications Manager Network devices
  • Medium 6.5
    CVE-2019-12714

    Cisco IC3000 Industrial Compute Gateway Denial of Service Vulnerability

    A vulnerability in the web-based management interface of Cisco IC3000 Industrial Compute Gateway could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected so…

    Cisco Cisco IC3000 Industrial Compute Gateway Network devices
  • Medium 6.1
    CVE-2019-12712

    Cisco Prime Infrastructure Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. T…

    Cisco Cisco Prime Infrastructure Network devices
  • Medium 6.1
    CVE-2019-12713

    Cisco Prime Infrastructure Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. T…

    Cisco Cisco Prime Infrastructure Network devices
  • Medium 6.1
    CVE-2019-12711

    Cisco Unified Communications Manager XML External Expansion Vulnerability

    A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to access sensitive information or cause a denial of s…

    Cisco Cisco Unified Communications Manager Network devices
  • Medium 4.9
    CVE-2019-12710

    Cisco Unified Communications Manager SQL Injection Vulnerability

    A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an authenticated, remote attacker to impact the confidentiality of an affected system by e…

    Cisco Cisco Unified Communications Manager Network devices
  • Medium 6.1
    CVE-2019-12707

    Multiple Cisco Unified Communications Products Cross-Site Scripting Vulnerability

    A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The…

    Cisco Cisco Unity Connection Network devices
  • Medium 5.8
    CVE-2019-12701

    Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability

    A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass the file and malware inspection policies on an affected system. The vulnerability exists b…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 6.5
    CVE-2019-12706

    Cisco Email Security Appliance Filter Bypass Vulnerability

    A vulnerability in the Sender Policy Framework (SPF) functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the configured user filters on an affected device. The vulnerabilit…

    Cisco Cisco Email Security Appliance (ESA) Network devices
  • High 7.7
    CVE-2019-12700

    Cisco FTD, FMC, and FXOS Software Pluggable Authentication Module Denial of Service Vulnerability

    A vulnerability in the configuration of the Pluggable Authentication Module (PAM) used in Cisco Firepower Threat Defense (FTD) Software, Cisco Firepower Management Center (FMC) Software, and Cisco FXOS Software could allow an authenticated, remote attacker to…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12699

    Cisco FXOS Software and Firepower Threat Defense Software Command Injection Vulnerabilities

    Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with root privileges. These vulnerabilities a…

    Cisco Cisco Firepower Extensible Operating System (FXOS) Network devices
  • Medium 5.3
    CVE-2019-12698

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CPU Denial of Service Vulnerability

    A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerabi…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Medium 5.8
    CVE-2019-12697

    Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities

    Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file types. For more information about these vulnerabilities, see t…

    Cisco Cisco FireSIGHT System Software Network devices
  • Medium 5.8
    CVE-2019-12696

    Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities

    Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file types. For more information about these vulnerabilities, see t…

    Cisco Cisco FireSIGHT System Software Network devices
  • Medium 6.1
    CVE-2019-12695

    Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerability

    A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a use…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Medium 6.7
    CVE-2019-12694

    Cisco Firepower Threat Defense Software Command Injection Vulnerability

    A vulnerability in the command line interface (CLI) of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker with administrative privileges to execute commands on the underlying operating system with root privileges. The v…

    Cisco Cisco Firepower Threat Defense Software Network devices
  • Medium 6.8
    CVE-2019-12693

    Cisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability

    A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to the use of an incorrect data type for …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Medium 4.1
    CVE-2019-12691

    Cisco Firepower Management Center Directory Traversal Vulnerability

    A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient inp…

    Cisco Cisco Firepower Management Center Network devices
  • High 7.5
    CVE-2019-12689

    Cisco Firepower Management Center Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. The vulnerability is du…

    Cisco Cisco Firepower Management Center Network devices
  • High 7.2
    CVE-2019-12690

    Cisco Firepower Management Center Command Injection Vulnerability

    A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the privileges of the root user of the underlying operating system. The vulnerabilit…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12687

    Cisco Firepower Management Center Remote Code Execution Vulnerability

    A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploi…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12688

    Cisco Firepower Management Center Remote Code Execution Vulnerability

    A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploi…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12686

    Cisco Firepower Management Center SQL Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to impr…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12685

    Cisco Firepower Management Center SQL Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to impr…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12684

    Cisco Firepower Management Center SQL Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to impr…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12683

    Cisco Firepower Management Center SQL Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to impr…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12682

    Cisco Firepower Management Center SQL Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to impr…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12681

    Cisco Firepower Management Center SQL Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to impr…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12679

    Cisco Firepower Management Center SQL Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to impr…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.8
    CVE-2019-12680

    Cisco Firepower Management Center SQL Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to impr…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.6
    CVE-2019-12678

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Inspection Denial of Service Vulnerability

    A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 7.7
    CVE-2019-12677

    Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability

    A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition that prevents the creation of new SSL/Transport Layer …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 7.4
    CVE-2019-12676

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF LSA Processing Denial of Service Vulnerability

    A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected devi…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.2
    CVE-2019-12675

    Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities

    Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace…

    Cisco Cisco Firepower Threat Defense Software Network devices
  • High 8.2
    CVE-2019-12674

    Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities

    Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace…

    Cisco Cisco Firepower Threat Defense Software Network devices
  • High 8.6
    CVE-2019-12673

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability

    A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vu…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Medium 6.1
    CVE-2019-12631

    Cisco Identity Services Engine Cross-Site Scripting Vulnerability

    A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.5
    CVE-2019-12630 EPSS 66%

    Cisco Security Manager Java Deserialization Vulnerability

    A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied cont…

    Cisco Cisco Security Manager Network devices
  • Medium 6.7
    CVE-2019-12717

    Cisco NX-OS Software Virtualization Manager Command Injection Vulnerability

    A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The vulnerability i…

    Cisco Cisco NX-OS Software 5.0(3)A1(1) Network devices