Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

9 records in Dna Spaces · all components

TI-2021-19919 CVE-2021-44228 · GHSA-jfh8-c2jp-5v3q

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
TI-2020-03126 CVE-2020-3586 · GHSA-wj9h-qr23-xmqh

Cisco DNA Spaces Connector Command Injection Vulnerability

Priority MEDIUM 53

A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0248 Published 2020-11-18 No fix listed CWE-78
TI-2021-01284 CVE-2021-1560 · GHSA-wc9r-v7x6-6jjq

Cisco DNA Spaces Connector Command Injection Vulnerabilities

Priority LOW 39

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02716 Published 2021-05-22 No fix listed CWE-78
TI-2021-01283 CVE-2021-1559 · GHSA-cq84-m873-rx6r

Cisco DNA Spaces Connector Command Injection Vulnerabilities

Priority LOW 39

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02716 Published 2021-05-22 No fix listed CWE-78
TI-2019-12036 CVE-2019-15997 · GHSA-wfmg-82gp-4v96

Cisco DNA Spaces: Connector Command Injection Vulnerability

Priority LOW 33

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00729 Published 2019-11-26 No fix listed CWE-20
TI-2021-01282 CVE-2021-1558 · GHSA-65qv-j42f-2v98

Cisco DNA Spaces Connector Privilege Escalation Vulnerabilities

Priority LOW 32

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00325 Published 2021-05-22 No fix listed CWE-78
TI-2021-01281 CVE-2021-1557 · GHSA-235w-frww-c569

Cisco DNA Spaces Connector Privilege Escalation Vulnerabilities

Priority LOW 32

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00325 Published 2021-05-22 No fix listed CWE-78
TI-2019-12035 CVE-2019-15996 · GHSA-4gg2-9pqf-2qqx

Cisco DNA Spaces: Connector Privilege Escalation Vulnerability

Priority LOW 32

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00518 Published 2019-11-26 No fix listed CWE-264
TI-2019-12034 CVE-2019-15995 · GHSA-cq99-vcvg-2ff7

Cisco DNA Spaces: Connector SQL Injection Vulnerability

Priority LOW 31

A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute arbitrary SQL queries.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0115 Published 2019-11-26 No fix listed CWE-89
Open these records in search →