Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

9 records in Firepower Management Center · all components

TI-2024-13312 CVE-2024-20379 · GHSA-pj9f-9jr9-4wm7

Path traversal in Cisco Firepower Management Center

Priority LOW 30

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to read arbitr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00623 Published 2024-10-23 No fix listed CWE-36
TI-2024-13348 CVE-2024-20415 · GHSA-6grm-m6x5-4cvx

Cross-site scripting in Cisco Firepower Management Center

Priority LOW 27

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00322 Published 2024-10-23 No fix listed CWE-79
TI-2024-13343 CVE-2024-20410 · GHSA-fqcq-8xcg-f9hh

Cross-site scripting in Cisco Firepower Management Center

Priority LOW 27

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00322 Published 2024-10-23 No fix listed CWE-79
TI-2024-13342 CVE-2024-20409 · GHSA-hwhr-j2m2-9887

Cross-site scripting in Cisco Firepower Management Center

Priority LOW 27

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00322 Published 2024-10-23 No fix listed CWE-79
TI-2024-13319 CVE-2024-20386 · GHSA-w38w-gj7f-5836

Cross-site scripting in Cisco Firepower Management Center

Priority LOW 27

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a us…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00392 Published 2024-10-23 No fix listed CWE-79
TI-2024-13305 CVE-2024-20372 · GHSA-3j6m-cq99-v646

Cross-site scripting in Cisco Firepower Management Center

Priority LOW 27

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a us…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00406 Published 2024-10-23 No fix listed CWE-79
TI-2024-13320 CVE-2024-20387 · GHSA-hr33-3275-hjcv

Cross-site scripting in Cisco Firepower Management Center

Priority LOW 25

A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in XSS attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0037 Published 2024-10-23 No fix listed CWE-79
TI-2024-13336 CVE-2024-20403 · GHSA-gxcq-9p33-rq8f

Cross-site scripting in Cisco Firepower Management Center

Priority LOW 24

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00305 Published 2024-10-23 No fix listed CWE-79
Open these records in search →