cisco

6,751 tracked vulnerabilities.

CVE-2021-1531 HIGH
Cisco Modeling Labs - Command Injection
May 22, 2021
CVSS 8.8
EPSS 0.12
CVE-2021-1487 HIGH
Cisco Prime Infrastructure & EPNM - Authenticated RCE via Web Interface
May 22, 2021
CVSS 8.8
EPSS 0.01
CVE-2021-1358 MEDIUM
Cisco Finesse < 12.6(1) - Unauthenticated Open Redirect via URL Parameter
May 22, 2021
CVSS 4.7
EPSS 0.00
CVE-2021-1306 MEDIUM
Cisco EPN Manager, ISE, Prime Infrastructure - Path Traversal
May 22, 2021
CVSS 4.4
EPSS 0.00
CVE-2021-1254 MEDIUM
Cisco Finesse < 12.6(1) - Authenticated Stored Cross-Site Scripting
May 22, 2021
CVSS 4.8
EPSS 0.00
CVE-2021-1535 MEDIUM
Cisco SD-WAN vManage - Info Disclosure
May 06, 2021
CVSS 5.3
EPSS 0.00
CVE-2021-1532 MEDIUM
Cisco TelePresence <9.14.6 & RoomOS <10.3.1 Authenticated Arbitrary File Read
May 06, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-1530 MEDIUM
Cisco BroadWorks Messaging Server - XML External Entity Injection via XML File Upload
May 06, 2021
CVSS 5.4
EPSS 0.00
CVE-2021-1521 MEDIUM
Cisco Video Surveillance 8000 Series IP Cameras < 1.0.9-11 - DoS via Cisco Discovery Protocol
May 06, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-1520 MEDIUM
Cisco RV340-345 - Privilege Escalation
May 06, 2021
CVSS 6.7
EPSS 0.00
CVE-2021-1519 MEDIUM
Cisco AnyConnect Secure Mobility Client < 4.10.00093 - Authenticated VPN Profile Overwrite via IPC Message
May 06, 2021
CVSS 4.7
EPSS 0.00
CVE-2021-1516 MEDIUM
Cisco AsyncOS Software - Info Disclosure
May 06, 2021
CVSS 4.3
EPSS 0.00
CVE-2021-1515 MEDIUM
Cisco SD-WAN vManage < 20.4.1 - Unauthenticated Sensitive Information Exposure via API Endpoint
May 06, 2021
CVSS 4.3
EPSS 0.00
CVE-2021-1514 HIGH
Cisco SD-WAN Software - Authenticated OS Command Injection via CLI
May 06, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-1513 HIGH
Cisco SD-WAN Software - Unauthenticated Denial of Service via Malformed Packet Handling
May 06, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-1512 MEDIUM
Cisco SD-WAN Software - Command Injection
May 06, 2021
CVSS 6.0
EPSS 0.00
CVE-2021-1511 HIGH
Cisco SD-WAN vEdge Firmware 20.4 - Remote Code Execution and Denial of Service
May 06, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-1510 HIGH
Cisco vEdge 100/1000/100B/100M/100WM/2000/5000/Cloud Firmware 20.4 - Remote Code Execution and Denial of Service
May 06, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-1509 HIGH
Cisco vEdge Firmware 20.4 - Remote Code Execution and Denial of Service
May 06, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-1508 CRITICAL
Cisco Catalyst SD-WAN Manager 20.4-20.4.1 and SD-WAN vManage < 19.2.99 - Missing Authorization
May 06, 2021
CVSS 9.8
EPSS 0.01
CVE-2021-1507 MEDIUM
Cisco SD-WAN vManage < 20.5.1 - Authenticated Stored Cross-Site Scripting via API Input
May 06, 2021
CVSS 6.4
EPSS 0.00
CVE-2021-1506 CRITICAL
Cisco Catalyst SD-WAN Manager 20.4-20.4.1 and SD-WAN vManage < 20.3.3 - Missing Authorization
May 06, 2021
CVSS 9.8
EPSS 0.02
CVE-2021-1505 CRITICAL
Cisco Catalyst SD-WAN Manager 20.4-20.4.1 and SD-WAN vManage < 20.3.3 - Missing Authorization
May 06, 2021
CVSS 9.8
EPSS 0.01
CVE-2021-1499 MEDIUM NUCLEI
Cisco HyperFlex HX Data Platform unauthenticated file upload to RCE (CVE-2021-1499)
May 06, 2021
CVSS 5.3
EPSS 0.93
CVE-2021-1498 CRITICAL KEVNUCLEI
Cisco HyperFlex HX Data Platform < 4.0(2e) - Unauthenticated OS Command Injection
May 06, 2021
CVSS 9.8
EPSS 0.94
Products
ios 613 ios_xe 541 adaptive_security_appliance_software 348 nx-os 275 unified_communications_manager 238 firepower_threat_defense 230 ios_xr 193 secure_firewall_management_center 182 identity_services_engine 165 webex_meetings_server 136 rv110w_firmware 128 rv130w_firmware 127 unified_computing_system 105 prime_infrastructure 88 wireless_lan_controller_software 88 catalyst_sd-wan_manager 85 application_extension_platform 79 rv215w_firmware 71 anyconnect_secure_mobility_client 69 data_center_network_manager 68 rv215w_wireless-n_vpn_router_firmware 68 webex_meetings 68 web_security_appliance 65 adaptive_security_appliance 63 unity_connection 63 rv130_vpn_router_firmware 62 rv130_firmware 59 webex_meetings_online 59 firepower_extensible_operating_system 56 asyncos 54
Quick Filters
Critical CVEs With Exploits In CISA KEV