cisco

6,751 tracked vulnerabilities.

CVE-2025-20352 HIGH KEV
Cisco IOS XE - Authenticated Stack-based Buffer Overflow via SNMP Packet
Sep 24, 2025
CVSS 7.7
EPSS 0.04
CVE-2025-20338 MEDIUM
Cisco IOS XE - Privilege Escalation
Sep 24, 2025
CVSS 6.0
EPSS 0.00
CVE-2025-20327 HIGH
Cisco IOS - Authenticated Denial of Service via Crafted URL
Sep 24, 2025
CVSS 7.7
EPSS 0.00
CVE-2025-20316 MEDIUM
Cisco IOS XE Software 17.7.1-17.9.6a - Unauthenticated Access Control Bypass via SVI Egress ACL
Sep 24, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-20315 HIGH
Cisco IOS XE Software - Unauthenticated Denial of Service via Malformed CAPWAP Packet Handling
Sep 24, 2025
CVSS 8.6
EPSS 0.00
CVE-2025-20314 MEDIUM
Cisco IOS XE Software 17.3.1-17.3.6 - Authenticated Code Execution via Software Package Validation Bypass
Sep 24, 2025
CVSS 6.7
EPSS 0.00
CVE-2025-20313 MEDIUM
Cisco IOS XE Software 17.3.1-17.3.6 - Path Traversal and Improper Image Integrity Validation
Sep 24, 2025
CVSS 6.7
EPSS 0.00
CVE-2025-20312 HIGH
Cisco IOS XE Software 17.2.1-17.3.3 DoS via SNMP Request Parsing
Sep 24, 2025
CVSS 7.7
EPSS 0.00
CVE-2025-20311 HIGH
Cisco IOS XE Software 16.6.1-16.6.10, 16.6.4a, 16.7.1 - Unauthenticated Denial of Service via Crafted Ethernet Frames
Sep 24, 2025
CVSS 7.4
EPSS 0.00
CVE-2025-20293 MEDIUM
Cisco IOS XE Software - Unauthenticated PKI Server Access via Incomplete Day One Setup Cleanup
Sep 24, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-20240 MEDIUM
Cisco IOS XE Software 16.6.1-16.6.10 - Unauthenticated Reflected Cross-Site Scripting
Sep 24, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-20160 HIGH
Cisco IOS Software - Info Disclosure
Sep 24, 2025
CVSS 8.1
EPSS 0.00
CVE-2025-20149 MEDIUM
Cisco IOS Software - Buffer Overflow
Sep 24, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-20365 MEDIUM
Cisco Access Point Software - Info Disclosure
Sep 24, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-20364 MEDIUM
Cisco Aironet IOS XE Controller - Unauthenticated 802.11 Action Frame Injection
Sep 24, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-20339 MEDIUM
Cisco SD-WAN vEdge Software - Auth Bypass
Sep 24, 2025
CVSS 5.8
EPSS 0.00
CVE-2025-20334 HIGH
Cisco IOS XE Software RCE via HTTP API Subsystem
Sep 24, 2025
CVSS 8.8
EPSS 0.00
CVE-2025-20340 HIGH
Cisco IOS XR Software - Unauthenticated Denial of Service via ARP Broadcast Storm
Sep 10, 2025
CVSS 7.4
EPSS 0.00
CVE-2025-20248 MEDIUM
Cisco IOS XR Software - Privilege Escalation
Sep 10, 2025
CVSS 6.0
EPSS 0.00
CVE-2025-20159 MEDIUM
Cisco IOS XR Software - Unauthenticated ACL Bypass for SSH, NetConf, and gRPC
Sep 10, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-20336 MEDIUM
Cisco Desk Phone/Cisco IP Phone/Cisco Video Phone - Info Disclosure
Sep 03, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-20335 MEDIUM
Cisco Desk Phone/Cisco IP Phone/Cisco Video Phone - Info Disclosure
Sep 03, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-20330 MEDIUM
Cisco Unified Communications Manager IM & Presence Service - Unauthenticated Stored Cross-Site Scripting
Sep 03, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-20328 MEDIUM
Cisco Webex Meetings - Authenticated Stored Cross-Site Scripting in User Profile Component
Sep 03, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-20326 MEDIUM
Cisco Unified Communications Manager - Cross-Site Request Forgery
Sep 03, 2025
CVSS 4.3
EPSS 0.00
Products
ios 613 ios_xe 541 adaptive_security_appliance_software 348 nx-os 275 unified_communications_manager 238 firepower_threat_defense 230 ios_xr 193 secure_firewall_management_center 182 identity_services_engine 165 webex_meetings_server 136 rv110w_firmware 128 rv130w_firmware 127 unified_computing_system 105 prime_infrastructure 88 wireless_lan_controller_software 88 catalyst_sd-wan_manager 85 application_extension_platform 79 rv215w_firmware 71 anyconnect_secure_mobility_client 69 data_center_network_manager 68 rv215w_wireless-n_vpn_router_firmware 68 webex_meetings 68 web_security_appliance 65 adaptive_security_appliance 63 unity_connection 63 rv130_vpn_router_firmware 62 rv130_firmware 59 webex_meetings_online 59 firepower_extensible_operating_system 56 asyncos 54
Quick Filters
Critical CVEs With Exploits In CISA KEV