Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

9 records in Firepower Threat Defense · all components

TI-2018-00255 CVE-2018-0296 · GHSA-h2mj-pqgp-xmmj

Improper input validation in Cisco Adaptive Security Appliance unknown

Priority CRITICAL 90KEV

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (Do…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99898 Published 2018-06-07 No fix listed CWE-20
TI-2018-10945 CVE-2018-15383 · GHSA-hmv9-9gm3-c2vc

Cisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability

Priority MEDIUM 44

A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to ca…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02495 Published 2018-10-05 No fix listed CWE-400
TI-2020-03119 CVE-2020-3578 · GHSA-6rgf-4c44-8hwh

Incorrect authorization in Cisco Adaptive Security Appliance Software

Priority LOW 37

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured a…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01243 Published 2020-10-21 No fix listed CWE-863
TI-2017-04391 CVE-2017-6632 · GHSA-4rxc-c47v-3rf5

Resource management flaw in Cisco FirePOWER System Software

Priority LOW 37

A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 could allow an unauthenticated, remote attacker to cause a denial of service (Do…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02414 Published 2017-05-22 No fix listed CWE-399
TI-2020-03125 CVE-2020-3585 · GHSA-w7hv-422j-p88g

Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability

Priority LOW 33

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote at…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01266 Published 2020-10-21 No fix listed CWE-203
TI-2020-03004 CVE-2020-3457 · GHSA-84qj-wpjh-wvj6

Cisco FXOS Software Command Injection Vulnerability

Priority LOW 32

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00405 Published 2020-10-21 No fix listed CWE-78
TI-2020-03123 CVE-2020-3582 · GHSA-9cp4-j6jm-4g5r

Cross-site scripting in Cisco Adaptive Security Appliance Software

Priority LOW 30

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cros…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01159 Published 2020-10-21 No fix listed CWE-79
TI-2020-03122 CVE-2020-3581 · GHSA-xcj5-29rv-3vfh

Cross-site scripting in Cisco Adaptive Security Appliance Software

Priority LOW 30

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cros…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01159 Published 2020-10-21 No fix listed CWE-79
TI-2020-03124 CVE-2020-3583 · GHSA-35fr-79wv-f9r8

Cross-site scripting in Cisco Adaptive Security Appliance Software

Priority LOW 29

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cros…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01071 Published 2020-10-21 No fix listed CWE-79
Open these records in search →