Skip to content
OpenAdvisories

Vendor

Cisco

3,476 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

3,476 results · Feed

  • Unscored —
    CVE-2018-15403

    Multiple Cisco Unified Communications Products Open Redirect Vulnerability

    A vulnerability in the web interface of Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an authenticated, remote attacker to redirect a user to…

    Cisco Cisco Emergency Responder Network devices
  • Unscored —
    CVE-2018-15412

    Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • Unscored —
    CVE-2018-15433

    Cisco Prime Infrastructure Information Disclosure Vulnerability

    A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacke…

    Cisco Cisco Prime Infrastructure Network devices
  • Unscored —
    CVE-2018-15430

    Cisco Expressway Series and Cisco TelePresence Video Communication Server Remote Code Execution Vulnerability

    A vulnerability in the administrative web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with user-level privileges on the underlying operating system.…

    Cisco Cisco TelePresence Video Communication Server (VCS) Network devices
  • Unscored —
    CVE-2018-15410

    Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • Unscored —
    CVE-2018-15405

    Cisco Integrated Management Controller Supervisor and Cisco UCS Director Authenticated Web Interface Information Disclosure Vulnerability

    A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to an auth…

    Cisco Cisco Unified Computing System Director Network devices
  • Unscored —
    CVE-2018-15400

    Cisco Cloud Services Platform 2100 Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected devi…

    Cisco Cisco Cloud Services Platform 2100 Network devices
  • Unscored —
    CVE-2018-15369

    Cisco IOS and IOS XE Software TACACS+ Client Denial of Service Vulnerability

    A vulnerability in the TACACS+ client subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due t…

    Cisco Cisco IOS Software iOS Network devices
  • Unscored —
    CVE-2018-15391

    Cisco Remote PHY IPv4 Fragment Denial of Service Vulnerability

    A vulnerability in certain IPv4 fragment-processing functions of Cisco Remote PHY Software could allow an unauthenticated, remote attacker to impact traffic passing through a device, potentially causing a denial of service (DoS) condition. The vulnerability i…

    Cisco Cisco Remote PHY Network devices
  • Unscored —
    CVE-2018-15398

    Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability

    A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control list (ACL) that is configured fo…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Unscored —
    CVE-2018-15387

    Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability

    A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by s…

    Cisco Cisco SD-WAN Solution Network devices
  • Unscored —
    CVE-2018-15425

    Multiple Vulnerabilities in Cisco Identity Services Engine

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web s…

    Cisco Cisco Identity Services Engine Software Network devices
  • Unscored —
    CVE-2018-15414

    Cisco Webex Network Recording Player Remote Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx ARF Player Network devices
  • Unscored —
    CVE-2018-15389

    Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability

    A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. T…

    Cisco Cisco Prime Collaboration Provisioning Network devices
  • Unscored —
    CVE-2018-15370

    Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability

    A vulnerability in Cisco IOS ROM Monitor (ROMMON) Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vu…

    Cisco Cisco Catalyst 6800 Series Switches Network devices
  • Unscored —
    CVE-2018-15375

    Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities

    A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected d…

    Cisco Cisco IOS Software iOS Network devices
  • Unscored —
    CVE-2018-15422

    Cisco Webex Network Recording Player Remote Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx ARF Player Network devices
  • Unscored —
    CVE-2018-15426

    Cisco Unity Connection Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is d…

    Cisco Cisco Unity Connection Network devices
  • Unscored —
    CVE-2018-15377

    Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak Vulnerability

    A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The v…

    Cisco Cisco IOS Software iOS Network devices
  • Unscored —
    CVE-2018-15374

    Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability

    A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install a malicious software image or file on an affected device. The vulnerability is due to the affected software improperly verifying…

    Cisco Cisco IOS XE Software iOS Network devices
  • Unscored —
    CVE-2018-15368

    Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability

    A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is …

    Cisco Cisco IOS XE Software iOS Network devices
  • Unscored —
    CVE-2018-15406

    Cisco UCS Director Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The v…

    Cisco Cisco Unified Computing System Director Network devices
  • Unscored —
    CVE-2018-15415

    Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • Unscored —
    CVE-2018-15427

    Cisco Video Surveillance Manager Appliance Default Password Vulnerability

    A vulnerability in Cisco Video Surveillance Manager (VSM) Software running on certain Cisco Connected Safety and Security Unified Computing System (UCS) platforms could allow an unauthenticated, remote attacker to log in to an affected system by using the roo…

    Cisco Cisco Video Surveillance Manager Network devices
  • Unscored —
    CVE-2018-15379 Public exploit EPSS 86%

    Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability

    A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file. This file could allow the attacker to execute commands at the …

    Cisco Cisco Prime Infrastructure Network devices
  • Unscored —
    CVE-2018-15401

    Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system…

    Cisco Cisco Hosted Collaboration Mediation Fulfillment Network devices
  • Unscored —
    CVE-2018-15382

    Cisco HyperFlex Software Static Signing Key Vulnerability

    A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens. The vulnerability is due to a static signing key that is present in all Cisco HyperFlex systems. An attacker could exploit th…

    Cisco Cisco HyperFlex HX-Series Network devices
  • Unscored —
    CVE-2018-15428

    Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability

    A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of cer…

    Cisco Cisco IOS XR Software iOS Network devices
  • Unscored —
    CVE-2018-15423

    Cisco HyperFlex UI Clickjacking Vulnerability

    A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests …

    Cisco Cisco HyperFlex HX-Series Network devices
  • Unscored —
    CVE-2018-15431

    Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • Unscored —
    CVE-2018-15436

    Cisco Webex Centers Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)…

    Cisco Cisco WebEx Event Center Network devices
  • Unscored —
    CVE-2018-15434

    Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected devi…

    Cisco Cisco Unified IP Phone 7900 Series Network devices
  • Unscored —
    CVE-2018-15420

    Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • Unscored —
    CVE-2018-0410

    A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow …

    Cisco AsyncOS Software for Cisco Web Security Appliances Network devices
  • Unscored —
    CVE-2018-0386

    A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker…

    Cisco Unified Communications Domain Manager Software Network devices
  • Unscored —
    CVE-2018-0412

    A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Sma…

    Cisco Small Business 300 Series Wireless Access Points Small Business 100 Series Wireless Access Points Network devices
  • Unscored —
    CVE-2018-0428

    A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated,…

    Cisco Web Security Appliance Network devices
  • Unscored —
    CVE-2018-0418

    A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services…

    Cisco ASR 9000 Series Aggregation Services Router Software Network devices
  • Unscored —
    CVE-2018-0419

    A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unau…

    Cisco Email Security Appliance (ESA) Network devices
  • Unscored —
    CVE-2018-0409

    A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P)…

    Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) TelePresence Video Communication Server (VCS) and Expressway Network devices