cisco

6,780 tracked vulnerabilities.

CVE-2025-20356 MEDIUM
Cisco Cyber Vision Center < 5.2.0 - Authenticated Stored Cross-Site Scripting via Sensor Explorer Page
Oct 01, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-20363 CRITICAL
Cisco IOS XR - Remote Code Execution via HTTP Request Input Validation
Sep 25, 2025
CVSS 9.0
EPSS 0.08
CVE-2025-20362 MEDIUM KEVNUCLEI
Cisco ASA 9.12-9.12.4.72 & FTD 7.0.0-7.0.8.1 Unauthenticated Missing Authorization via VPN Web Server
Sep 25, 2025
CVSS 6.5
EPSS 0.86
CVE-2025-20333 CRITICAL KEV
Cisco Secure Firewall ASA/FTD - RCE
Sep 25, 2025
CVSS 9.9
EPSS 0.40
CVE-2025-20352 HIGH KEV
Cisco IOS XE - Authenticated Stack-based Buffer Overflow via SNMP Packet
Sep 24, 2025
CVSS 7.7
EPSS 0.38
CVE-2025-20338 MEDIUM
Cisco IOS XE - Privilege Escalation
Sep 24, 2025
CVSS 6.0
EPSS 0.00
CVE-2025-20327 HIGH
Cisco IOS - Authenticated Denial of Service via Crafted URL
Sep 24, 2025
CVSS 7.7
EPSS 0.00
CVE-2025-20316 MEDIUM
Cisco IOS XE Software 17.7.1-17.9.6a - Unauthenticated Access Control Bypass via SVI Egress ACL
Sep 24, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-20315 HIGH
Cisco IOS XE Software - Unauthenticated Denial of Service via Malformed CAPWAP Packet Handling
Sep 24, 2025
CVSS 8.6
EPSS 0.00
CVE-2025-20314 MEDIUM
Cisco IOS XE Software 17.3.1-17.3.6 - Authenticated Code Execution via Software Package Validation Bypass
Sep 24, 2025
CVSS 6.7
EPSS 0.00
CVE-2025-20313 MEDIUM
Cisco IOS XE Software 17.3.1-17.3.6 - Path Traversal and Improper Image Integrity Validation
Sep 24, 2025
CVSS 6.7
EPSS 0.00
CVE-2025-20312 HIGH
Cisco IOS XE Software 17.2.1-17.3.3 DoS via SNMP Request Parsing
Sep 24, 2025
CVSS 7.7
EPSS 0.00
CVE-2025-20311 HIGH
Cisco IOS XE Software 16.6.1-16.6.10, 16.6.4a, 16.7.1 - Unauthenticated Denial of Service via Crafted Ethernet Frames
Sep 24, 2025
CVSS 7.4
EPSS 0.00
CVE-2025-20293 MEDIUM
Cisco IOS XE Software - Unauthenticated PKI Server Access via Incomplete Day One Setup Cleanup
Sep 24, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-20240 MEDIUM
Cisco IOS XE Software 16.6.1-16.6.10 - Unauthenticated Reflected Cross-Site Scripting
Sep 24, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-20160 HIGH
Cisco IOS Software - Info Disclosure
Sep 24, 2025
CVSS 8.1
EPSS 0.00
CVE-2025-20149 MEDIUM
Cisco IOS Software - Buffer Overflow
Sep 24, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-20365 MEDIUM
Cisco Access Point Software - Info Disclosure
Sep 24, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-20364 MEDIUM
Cisco Aironet IOS XE Controller - Unauthenticated 802.11 Action Frame Injection
Sep 24, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-20339 MEDIUM
Cisco SD-WAN vEdge Software - Auth Bypass
Sep 24, 2025
CVSS 5.8
EPSS 0.00
CVE-2025-20334 HIGH
Cisco IOS XE Software RCE via HTTP API Subsystem
Sep 24, 2025
CVSS 8.8
EPSS 0.00
CVE-2025-20340 HIGH
Cisco IOS XR Software - Unauthenticated Denial of Service via ARP Broadcast Storm
Sep 10, 2025
CVSS 7.4
EPSS 0.01
CVE-2025-20248 MEDIUM
Cisco IOS XR Software - Privilege Escalation
Sep 10, 2025
CVSS 6.0
EPSS 0.00
CVE-2025-20159 MEDIUM
Cisco IOS XR Software - Unauthenticated ACL Bypass for SSH, NetConf, and gRPC
Sep 10, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-20336 MEDIUM
Cisco Desk Phone/Cisco IP Phone/Cisco Video Phone - Info Disclosure
Sep 03, 2025
CVSS 5.3
EPSS 0.00
Products
ios 613 ios_xe 541 adaptive_security_appliance_software 351 nx-os 275 unified_communications_manager 239 firepower_threat_defense 230 ios_xr 196 secure_firewall_management_center 182 identity_services_engine 175 webex_meetings_server 136 rv110w_firmware 132 rv130w_firmware 131 unified_computing_system 105 catalyst_sd-wan_manager 91 prime_infrastructure 89 wireless_lan_controller_software 88 application_extension_platform 79 rv215w_firmware 71 anyconnect_secure_mobility_client 69 webex_meetings 69 data_center_network_manager 68 rv215w_wireless-n_vpn_router_firmware 68 unity_connection 65 web_security_appliance 65 adaptive_security_appliance 63 rv130_firmware 63 rv130_vpn_router_firmware 62 webex_meetings_online 59 firepower_extensible_operating_system 56 asyncos 54
Quick Filters
Critical CVEs With Exploits In CISA KEV