Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

9 records in Fxos · all components

TI-2021-19919 CVE-2021-44228 · GHSA-jfh8-c2jp-5v3q

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
TI-2017-02979 CVE-2017-3883 · GHSA-v65q-78qf-p4jg

A vulnerability in the authentication, authorization, and accounting (AAA) implementation…

Priority MEDIUM 45

A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0445 Published 2017-10-19 No fix listed CWE-770
TI-2018-00259 CVE-2018-0300 · GHSA-ch88-fg86-h47v

Path traversal in Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300…

Priority MEDIUM 43

A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remo…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.06986 Published 2018-06-21 No fix listed CWE-22
TI-2021-13714 CVE-2021-34714 · GHSA-wjvw-6gq9-r937

Multiple Cisco Operating Systems Unidirectional Link Detection Denial of Service Vulnerability

Priority LOW 33

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjac…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00389 Published 2021-09-23 No fix listed CWE-20
TI-2020-02682 CVE-2020-3120 · GHSA-vw86-rxwf-9vhm

Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability

Priority LOW 32

A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected d…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01639 Published 2020-02-05 Fixed in 2.3.1.173 CWE-190
TI-2018-00253 CVE-2018-0294 · GHSA-f392-wcr5-grrm

Access control flaw in Cisco FXOS and NX-OS unknown

Priority LOW 32

A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00432 Published 2018-06-20 No fix listed CWE-264
TI-2018-00290 CVE-2018-0331 · GHSA-frp3-j6g7-xf43

Resource management flaw in Cisco FXOS, NX-OS, and UCS Manager unknown

Priority LOW 30

A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an unauthenticated, adjacent attacker to cr…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00617 Published 2018-06-21 No fix listed CWE-399
TI-2023-06725 CVE-2023-20016 · GHSA-xj38-cqqv-5f7w

Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability

Priority LOW 28

A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to dec…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.0011 Published 2023-02-23 No fix listed CWE-321
Open these records in search →