Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

8 records in Asa · all components

TI-2014-02722 CVE-2014-3389 · GHSA-c85q-3jc8-pgfg

The VPN implementation in Cisco ASA Software 7.2 before 7.2(5.15), 8.2 before 8.2(5.51)…

Priority MEDIUM 44

The VPN implementation in Cisco ASA Software 7.2 before 7.2(5.15), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.6),…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02797 Published 2014-10-10 No fix listed
TI-2014-02721 CVE-2014-3388 · GHSA-5v42-qcw2-88f2

The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before…

Priority LOW 37

The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7), and 9.2 before 9.2(2) allows remote attackers to cause a denial of service (device reload) via crafted DNS packets, aka Bug ID CS…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01328 Published 2014-10-10 No fix listed CWE-399
TI-2014-02720 CVE-2014-3387 · GHSA-cgj8-f835-j993

The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before…

Priority LOW 37

The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01328 Published 2014-10-10 No fix listed CWE-399
TI-2014-02717 CVE-2014-3384 · GHSA-4vqj-9m7j-xf46

The IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before…

Priority LOW 37

The IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted p…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01614 Published 2014-10-10 No fix listed CWE-399
Open these records in search →