Cisco

Records7060All Threatist records

Exploited (KEV)107In CISA KEV

CVSS critical694CVSS 9.0–10.0

CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability CRITICAL 94KEV 2026-10-29 TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CRITICAL 100KEV 2026-10-14 TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CRITICAL 100KEV 2026-09-30 TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CRITICAL 100KEV 2026-09-16 TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability CRITICAL 100KEV 2026-09-14 TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records

Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

14 records in Intrusion Prevention System · all components

TI-2013-01061 CVE-2013-1218 · GHSA-rr98-pxc2-rprw

Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules…

LOW 38

Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragment…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01887 Published 2013-07-18 No fix listed CWE-119

TI-2013-02978 CVE-2013-3411 · GHSA-6952-3242-f9ff

The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst…

LOW 37

The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service (device hang) via malformed IPv4 TCP packets…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01333 Published 2013-07-18 No fix listed

TI-2013-02977 CVE-2013-3410 · GHSA-496h-69gj-q856

Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4…

LOW 37

Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01333 Published 2013-07-18 No fix listed CWE-119

TI-2013-01082 CVE-2013-1243 · GHSA-q93j-v62p-25v5

The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP…

LOW 37

The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before 7.1(5)E4 allows remote a…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01328 Published 2013-07-18 No fix listed CWE-119

TI-2008-01980 CVE-2008-2060 · GHSA-vjff-mhv7-25px

Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2…

LOW 37

Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of serv…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01711 Published 2008-06-18 No fix listed CWE-16

TI-2015-00605 CVE-2015-0654 · GHSA-f86g-x5mj-qg95

Race condition in the TLS implementation in MainApp in the management interface in Cisco…

LOW 34

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of service (process hang) by e…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.01264 Published 2015-03-13 No fix listed CWE-362

TI-2014-02738 CVE-2014-3406 · GHSA-23fc-p3ph-rj82

Race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS)…

LOW 33

Race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers to cause a denial of service (device reload) via crafted IP traffic that matches a…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.00889 Published 2014-10-19 No fix listed CWE-362

TI-2014-01655 CVE-2014-2103 · GHSA-8wf5-m44j-r94p

Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a…

LOW 32

Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309.

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.01061 Published 2014-02-27 No fix listed CWE-20

TI-2014-02734 CVE-2014-3402 · GHSA-mxxp-82c5-w5g9

The authentication-manager process in the web framework in Cisco Intrusion Prevention…

LOW 26

The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection System (IDS) does not properly manage user tokens, which allows remote…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01345 Published 2014-10-10 No fix listed CWE-287

TI-2011-03552 CVE-2011-4022 · GHSA-q6pw-prgw-qpmh

The sensor in Cisco Intrusion Prevention System (IPS) 7.0 and 7.1 allows remote attackers…

LOW 26

The sensor in Cisco Intrusion Prevention System (IPS) 7.0 and 7.1 allows remote attackers to cause a denial of service (file-handle exhaustion and mainApp hang) by making authentication attempts that exceed the configure…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01337 Published 2012-05-03 No fix listed CWE-287

TI-2012-03354 CVE-2012-3901 · GHSA-8gc9-8wj3-2rqj

The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows…

LOW 25

The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service (process crash and traffic-inspection outage) via network traffic, aka Bug ID CSCta96…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01218 Published 2012-09-16 No fix listed CWE-119

TI-2012-03353 CVE-2012-3899 · GHSA-p75j-c4gv-8vx8

sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate…

LOW 25

sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01232 Published 2012-09-16 No fix listed CWE-399

TI-2013-04693 CVE-2013-5497 · GHSA-gxvq-r3px-2779

The authentication manager process in the web framework in Cisco Intrusion Prevention…

LOW 24

The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, which allows remote attackers to cause a denial of service (intermittent MainApp ha…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01914 Published 2013-09-19 No fix listed CWE-287

TI-2013-01062 CVE-2013-1219 · GHSA-gjfg-6v77-jvh3

SensorApp in Cisco Intrusion Prevention System (IPS) allows local users to cause a denial…

LOW 20

SensorApp in Cisco Intrusion Prevention System (IPS) allows local users to cause a denial of service (Regex hardware job failure and application hang) via a (1) initiate signature upgrade, (2) initiate global correlation…

CVSS 2.0MEDIUM 4.4 Local Low privileges Interaction — EPSS 0.00247 Published 2013-04-29 No fix listed

Open these records in search →

Critical	694
High	2793
Medium	3496
Low	75
No CVSS	2