Cisco

Records7060All Threatist records

Exploited (KEV)107In CISA KEV

CVSS critical694CVSS 9.0–10.0

CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability CRITICAL 94KEV 2026-10-29 TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CRITICAL 100KEV 2026-10-14 TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CRITICAL 100KEV 2026-09-30 TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CRITICAL 100KEV 2026-09-16 TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability CRITICAL 100KEV 2026-09-14 TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records

Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

12 records in Ciscoworks Common Services · all components

TI-2005-00319 CVE-2005-0356 · GHSA-r6gj-g9qf-3c55

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with…

MEDIUM 64

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a la…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.82756 Published 2005-05-31 No fix listed

TI-2009-01101 CVE-2009-1161 · GHSA-p549-g2jj-vm8x

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services…

MEDIUM 60

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessme…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.16532 Published 2009-05-21 No fix listed CWE-22

TI-2011-00835 CVE-2011-0966 · GHSA-5pm8-4cgq-c8fp

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component…

MEDIUM 58

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.41348 Published 2011-05-20 No fix listed CWE-22

TI-2011-02931 CVE-2011-3310 · GHSA-qr2h-w42m-wrfm

The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as…

MEDIUM 55

The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, C…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.15163 Published 2011-10-20 No fix listed CWE-94

TI-2010-02906 CVE-2010-3036 · GHSA-36rh-2x2f-hxh9

Multiple buffer overflows in the authentication functionality in the web-server module in…

MEDIUM 52

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05992 Published 2010-10-29 No fix listed CWE-119

TI-2004-00066 CVE-2004-0079 · GHSA-xcj5-xcx2-vvvv

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c…

MEDIUM 51

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09537 Published 2004-03-18 Fixed CWE-476

TI-2008-01974 CVE-2008-2054 · GHSA-2fj5-45wv-94qc

Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows…

MEDIUM 47

Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a client machine via unknown vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03909 Published 2008-05-29 No fix listed

TI-2004-00095 CVE-2004-0112 · GHSA-ph6p-3j2f-xq2g

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos…

LOW 35

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a de…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.10424 Published 2004-03-18 Fixed CWE-125

TI-2004-00068 CVE-2004-0081 · GHSA-pcwf-qwvv-qjg3

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows…

LOW 33

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07229 Published 2004-03-18 Fixed

TI-2011-00832 CVE-2011-0961 · GHSA-jgm5-f5vx-vqj5

Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in…

LOW 28

Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the device para…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05154 Published 2011-05-20 No fix listed CWE-79

TI-2011-01792 CVE-2011-2042 · GHSA-853p-pw8h-rw48

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and…

LOW 25

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an uns…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01076 Published 2011-10-22 No fix listed CWE-200

TI-2011-03716 CVE-2011-4237 · GHSA-gx5r-ph5h-r7wr

CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as…

LOW 22

CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and condu…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01154 Published 2012-05-03 No fix listed CWE-94

Open these records in search →

Critical	694
High	2793
Medium	3496
Low	75
No CVSS	2