cisco

6,787 tracked vulnerabilities.

CVE-2021-34753 MEDIUM
Cisco Firepower Threat Defense Software < 6.4.0.13 - Unauthenticated Access Control Bypass via ENIP Packet Inspection
Nov 15, 2024
CVSS 5.8
EPSS 0.01
CVE-2021-34752 MEDIUM
Cisco FTD Software - Command Injection
Nov 15, 2024
CVSS 6.7
EPSS 0.00
CVE-2021-34751 MEDIUM
Cisco Firepower Management Center - Info Disclosure
Nov 15, 2024
CVSS 4.3
EPSS 0.00
CVE-2021-34750 MEDIUM
Cisco Firepower Management Center Software - Info Disclosure
Nov 15, 2024
CVSS 4.3
EPSS 0.00
CVE-2021-1494 MEDIUM
Cisco Firepower Threat Defense Software - Unauthenticated File Policy Bypass via HTTP Header Handling
Nov 15, 2024
CVSS 5.8
EPSS 0.01
CVE-2021-1491 MEDIUM
Cisco Catalyst SD-WAN Manager - Authenticated Arbitrary File Read via File Reference Manipulation
Nov 15, 2024
CVSS 6.5
EPSS 0.01
CVE-2021-1484 MEDIUM
Cisco Catalyst SD-WAN Manager - Authenticated Command Injection via Device Template Configuration
Nov 15, 2024
CVSS 6.5
EPSS 0.01
CVE-2021-1483 MEDIUM
Cisco SD-WAN vManage - Authenticated XML External Entity Injection via Crafted XML File Import
Nov 15, 2024
CVSS 6.4
EPSS 0.01
CVE-2021-1482 MEDIUM
Cisco Catalyst SD-WAN Manager - Authenticated Authorization Bypass via Crafted HTTP Requests
Nov 15, 2024
CVSS 6.4
EPSS 0.01
CVE-2021-1481 MEDIUM
Cisco SD-WAN vManage Software - SQL Injection
Nov 15, 2024
CVSS 4.3
EPSS 0.01
CVE-2021-1470 MEDIUM
Cisco Catalyst SD-WAN Manager - Authenticated SQL Injection via Web Interface
Nov 15, 2024
CVSS 4.9
EPSS 0.01
CVE-2021-1466 MEDIUM
Cisco SD-WAN vManage - Authenticated Denial of Service via vDaemon Buffer Overflow
Nov 15, 2024
CVSS 5.4
EPSS 0.01
CVE-2021-1464 MEDIUM
Cisco Catalyst SD-WAN Manager - Authenticated Authorization Bypass via Crafted Command Requests
Nov 15, 2024
CVSS 5.0
EPSS 0.01
CVE-2021-27853 MEDIUM
IEEE 802.2 < 802.2h-1997 - Authentication Bypass via VLAN 0 and LLC/SNAP Header Spoofing
Sep 27, 2022
CVSS 4.7
EPSS 0.01
CVE-2021-34704 HIGH
Cisco ASA & FTD - Unauthenticated DoS via HTTPS Request Parsing
Jan 11, 2022
CVSS 8.6
EPSS 0.01
CVE-2021-1573 HIGH
Cisco ASA & FTD Unauthenticated DoS via HTTPS Request Parsing
Jan 11, 2022
CVSS 8.6
EPSS 0.01
CVE-2021-44832 MEDIUM
Apache Log4j 2.0-beta7-2.17.0 - Remote Code Execution via JDBC Appender JNDI LDAP Data Source
Dec 28, 2021
CVSS 6.6
EPSS 0.98
CVE-2021-44228 CRITICAL KEVNUCLEI
Log4Shell HTTP Header Injection
Dec 10, 2021
CVSS 10.0
EPSS 1.00
CVE-2021-40131 MEDIUM
Cisco Common Services Platform Collector < 2.9.1.1 - Authenticated Stored Cross-Site Scripting
Nov 19, 2021
CVSS 5.5
EPSS 0.01
CVE-2021-40130 MEDIUM
Cisco Common Services Platform Collector < 2.9.1.1 - Authenticated Arbitrary File Read via Syslog Configuration
Nov 19, 2021
CVSS 4.9
EPSS 0.01
CVE-2021-40129 MEDIUM
Cisco Common Services Platform Collector < 2.9.1.1 - Authenticated SQL Injection via File Upload
Nov 19, 2021
CVSS 4.9
EPSS 0.01
CVE-2021-40128 MEDIUM
Cisco Webex Meetings - Open Redirect
Nov 04, 2021
CVSS 5.3
EPSS 0.01
CVE-2021-40127 MEDIUM
Cisco Small Business 200/300/500 Series Switches - Unauthenticated Denial of Service via HTTP Request
Nov 04, 2021
CVSS 5.3
EPSS 0.01
CVE-2021-40126 MEDIUM
Cisco Umbrella - Authenticated Email Enumeration via Dashboard Error Message
Nov 04, 2021
CVSS 4.3
EPSS 0.01
CVE-2021-40124 MEDIUM
Cisco Anyconnect Secure Mobility Client < 4.10.03104 - Improper Privilege Management
Nov 04, 2021
CVSS 6.7
EPSS 0.00
Products
ios 613 ios_xe 541 adaptive_security_appliance_software 351 nx-os 275 unified_communications_manager 239 firepower_threat_defense 230 ios_xr 196 secure_firewall_management_center 182 identity_services_engine 175 webex_meetings_server 136 rv110w_firmware 132 rv130w_firmware 131 unified_computing_system 105 catalyst_sd-wan_manager 91 prime_infrastructure 89 wireless_lan_controller_software 88 application_extension_platform 79 rv215w_firmware 71 anyconnect_secure_mobility_client 69 webex_meetings 69 data_center_network_manager 68 rv215w_wireless-n_vpn_router_firmware 68 unity_connection 65 web_security_appliance 65 adaptive_security_appliance 63 rv130_firmware 63 rv130_vpn_router_firmware 62 webex_meetings_online 59 firepower_extensible_operating_system 56 asyncos 54
Quick Filters
Critical CVEs With Exploits In CISA KEV