cisco

6,751 tracked vulnerabilities.

CVE-2022-20876 MEDIUM
Cisco RV110W RV130 RV130W RV215W - Authenticated Remote Code Execution via HTTP Packet User Field
Jul 21, 2022
CVSS 4.7
EPSS 0.00
CVE-2022-20875 MEDIUM
Cisco RV110W RV130 RV130W RV215W - Authenticated Remote Code Execution via HTTP Packet User Field Injection
Jul 21, 2022
CVSS 4.7
EPSS 0.00
CVE-2022-20874 MEDIUM
Cisco RV110W RV130 RV130W RV215W - Authenticated Remote Code Execution and Denial of Service via HTTP Packet User Field
Jul 21, 2022
CVSS 4.7
EPSS 0.00
CVE-2022-20873 MEDIUM
Cisco RV110W RV130 RV130W RV215W - Authenticated Remote Code Execution and Denial of Service via HTTP Packet User Field
Jul 21, 2022
CVSS 4.7
EPSS 0.00
CVE-2022-20861 CRITICAL
Cisco Nexus Dashboard 1.1-2.2(1e) - Unauthenticated Remote Code Execution and Arbitrary File Read/Write
Jul 21, 2022
CVSS 9.8
EPSS 0.00
CVE-2022-20860 HIGH
Cisco Nexus Dashboard 1.1-2.2(1h) - Unauthenticated Man-in-the-Middle via SSL Certificate Validation Bypass
Jul 21, 2022
CVSS 7.4
EPSS 0.00
CVE-2022-20858 CRITICAL
Cisco Nexus Dashboard 2.0-2.2(1e) - Unauthenticated Remote Code Execution and Arbitrary File Read/Write
Jul 21, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-20857 CRITICAL
Cisco Nexus Dashboard 1.0-2.2(1e) - Unauthenticated Remote Code Execution and Arbitrary File Read/Write
Jul 21, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-20862 MEDIUM
Cisco Unified Communications Manager < 12.5(1)su6 and 14.0-14su2 - Authenticated Path Traversal
Jul 06, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-20859 MEDIUM
Cisco Unified Communications Manager 14.0-14.0su2 - Improper Access Control via Disaster Recovery Framework
Jul 06, 2022
CVSS 6.5
EPSS 0.02
CVE-2022-20815 MEDIUM
Cisco Unified Communications Manager 14.0-14su2 & IM & Presence Service 11.5(1)-11.5(1)su11 - Stored XSS
Jul 06, 2022
CVSS 6.1
EPSS 0.00
CVE-2022-20813 CRITICAL
Cisco Expressway and TelePresence VCS < X14.0.7 - Arbitrary File Overwrite and Null Byte Poisoning
Jul 06, 2022
CVSS 9.0
EPSS 0.00
CVE-2022-20812 CRITICAL
Cisco Expressway and TelePresence VCS < X14.0.7 - Path Traversal and Arbitrary File Write
Jul 06, 2022
CVSS 9.0
EPSS 0.01
CVE-2022-20808 HIGH
Cisco Smart Software Manager On-Prem 8-202112 - Authenticated Denial of Service via Device Registration Requests
Jul 06, 2022
CVSS 7.7
EPSS 0.01
CVE-2022-20800 MEDIUM
Cisco Unified Communications Manager 11.5(1)-14su2 - Unauthenticated Stored Cross-Site Scripting via Web Interface
Jul 06, 2022
CVSS 6.1
EPSS 0.00
CVE-2022-20791 MEDIUM
Cisco Unified Communications Manager < 11.5(1.10000.6) & IM & Presence Service < 12.5(1) - Arbitrary File Read
Jul 06, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-20768 MEDIUM
Cisco TelePresence CE/RoomOS - Info Disclosure
Jul 06, 2022
CVSS 4.9
EPSS 0.00
CVE-2022-20752 MEDIUM
Cisco Unified Communications Manager 12.5(1) - Observable Timing Discrepancy
Jul 06, 2022
CVSS 5.3
EPSS 0.00
CVE-2022-20829 CRITICAL
Cisco ASA and ASDM - Authenticated Arbitrary Code Execution via Malicious ASDM Image
Jun 24, 2022
CVSS 9.1
EPSS 0.05
CVE-2022-20828 MEDIUM
Cisco ASA-X with FirePOWER Services Authenticated Command Injection
Jun 24, 2022
CVSS 6.5
EPSS 0.53
CVE-2022-20651 MEDIUM
Cisco ASDM 7.15.1-7.17.1 Authenticated Sensitive Information Disclosure
Jun 22, 2022
CVSS 5.5
EPSS 0.00
CVE-2022-31734 MEDIUM
Cisco Catalyst 2940 Series Switches < 12.2(50)SY - Reflected Cross-Site Scripting via Error Page
Jun 20, 2022
CVSS 6.1
EPSS 0.01
CVE-2022-20825 CRITICAL
Cisco RV110W, RV130, RV130W, RV215W Routers - Unauthenticated RCE via HTTP Input Validation
Jun 15, 2022
CVSS 9.8
EPSS 0.04
CVE-2022-20819 MEDIUM
Cisco Identity Services Engine - Authenticated Sensitive Information Exposure via Web Management Interface
Jun 15, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-20817 HIGH
Cisco Unified IP Phones - Privilege Escalation
Jun 15, 2022
CVSS 7.4
EPSS 0.01
Products
ios 613 ios_xe 541 adaptive_security_appliance_software 348 nx-os 275 unified_communications_manager 238 firepower_threat_defense 230 ios_xr 193 secure_firewall_management_center 182 identity_services_engine 165 webex_meetings_server 136 rv110w_firmware 128 rv130w_firmware 127 unified_computing_system 105 prime_infrastructure 88 wireless_lan_controller_software 88 catalyst_sd-wan_manager 85 application_extension_platform 79 rv215w_firmware 71 anyconnect_secure_mobility_client 69 data_center_network_manager 68 rv215w_wireless-n_vpn_router_firmware 68 webex_meetings 68 web_security_appliance 65 adaptive_security_appliance 63 unity_connection 63 rv130_vpn_router_firmware 62 rv130_firmware 59 webex_meetings_online 59 firepower_extensible_operating_system 56 asyncos 54
Quick Filters
Critical CVEs With Exploits In CISA KEV