cisco

6,751 tracked vulnerabilities.

CVE-2020-3441 MEDIUM
Cisco Webex Meetings - Info Disclosure
Nov 18, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-3419 MEDIUM
Cisco Webex Meetings Server - Unauthenticated Meeting Access via Authentication Token Bypass
Nov 18, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-3392 HIGH
Cisco IoT Field Network Director < 4.6.1 - Unauthenticated Sensitive Information Exposure via API
Nov 18, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-3367 HIGH
Cisco AsyncOS < 11.7.2-011 - Authenticated OS Command Injection via Log Subscription Subsystem
Nov 18, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-27126 MEDIUM
Cisco Webex Meetings - Unauthenticated Cross-Site Scripting via API Input
Nov 18, 2020
CVSS 6.1
EPSS 0.00
CVE-2020-26081 MEDIUM
Cisco IoT Field Network Director < 4.6.1 - Unauthenticated Cross-Site Scripting
Nov 18, 2020
CVSS 6.1
EPSS 0.00
CVE-2020-26080 MEDIUM
Cisco IoT Field Network Director < 4.6.1 - Authenticated Improper Access Control via JSON Payload Manipulation
Nov 18, 2020
CVSS 4.1
EPSS 0.00
CVE-2020-26079 MEDIUM
Cisco IoT Field Network Director < 4.6.1 - Authenticated Password Hash Exposure via User Information Call
Nov 18, 2020
CVSS 4.9
EPSS 0.00
CVE-2020-26078 MEDIUM
Cisco IoT FND - Privilege Escalation
Nov 18, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-26077 MEDIUM
Cisco IoT Field Network Director < 4.6.1 - Authenticated Improper Access Control via API Request
Nov 18, 2020
CVSS 4.3
EPSS 0.00
CVE-2020-26076 HIGH
Cisco IoT Field Network Director < 4.6.1 - Sensitive Database Information Exposure
Nov 18, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-26075 HIGH
Cisco IoT Field Network Director < 4.6.1 - Authenticated SQL Injection via REST API
Nov 18, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-26072 HIGH
Cisco IoT Field Network Director < 4.6.1 - Authenticated Improper Access Control via SOAP API
Nov 18, 2020
CVSS 8.7
EPSS 0.00
CVE-2020-26068 MEDIUM
Cisco RoomOS and Telepresence CE 9.10.0-9.10.3 - Authenticated Access Token Generation via xAPI Service
Nov 18, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-27131 HIGH
Cisco Security Manager < 4.22 - Unauthenticated Remote Code Execution via Java Deserialization
Nov 17, 2020
CVSS 8.1
EPSS 0.88
CVE-2020-27130 CRITICAL
Cisco Security Manager - Info Disclosure
Nov 17, 2020
CVSS 9.1
EPSS 0.14
CVE-2020-27125 HIGH
Cisco Security Manager - Info Disclosure
Nov 17, 2020
CVSS 7.4
EPSS 0.01
CVE-2020-26070 HIGH
Cisco IOS XR < 6.7.2 - Unauthenticated Denial of Service via Ingress Packet Processing
Nov 12, 2020
CVSS 8.6
EPSS 0.02
CVE-2020-3604 HIGH
Cisco Webex Meetings < 40.6.11 - Remote Code Execution via Malicious ARF or WRF File
Nov 06, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-3603 HIGH
Cisco Webex Player for Windows - RCE
Nov 06, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-3600 HIGH
Cisco SD-WAN Software - Privilege Escalation
Nov 06, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-3595 HIGH
Cisco SD-WAN < 20.1.2 - Authenticated Privilege Escalation via Incorrect Command Permissions
Nov 06, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-3594 HIGH
Cisco SD-WAN < 20.1.2 - Authenticated Privilege Escalation via Command Options
Nov 06, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-3593 HIGH
Cisco SD-WAN < 20.1.2 - Authenticated Privilege Escalation via Crafted Utility Request
Nov 06, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-3592 MEDIUM
Cisco SD-WAN vManage < 20.1.12 - Authenticated Authorization Bypass via Crafted HTTP Requests
Nov 06, 2020
CVSS 6.5
EPSS 0.00
Products
ios 613 ios_xe 541 adaptive_security_appliance_software 348 nx-os 275 unified_communications_manager 238 firepower_threat_defense 230 ios_xr 193 secure_firewall_management_center 182 identity_services_engine 165 webex_meetings_server 136 rv110w_firmware 128 rv130w_firmware 127 unified_computing_system 105 prime_infrastructure 88 wireless_lan_controller_software 88 catalyst_sd-wan_manager 85 application_extension_platform 79 rv215w_firmware 71 anyconnect_secure_mobility_client 69 data_center_network_manager 68 rv215w_wireless-n_vpn_router_firmware 68 webex_meetings 68 web_security_appliance 65 adaptive_security_appliance 63 unity_connection 63 rv130_vpn_router_firmware 62 rv130_firmware 59 webex_meetings_online 59 firepower_extensible_operating_system 56 asyncos 54
Quick Filters
Critical CVEs With Exploits In CISA KEV