Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

9 records in Iox · all components

TI-2017-02950 CVE-2017-3853 · GHSA-q7j7-c4rf-9cfp

Memory corruption in Cisco IOx

Priority MEDIUM 53

A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an unauthenticated, remote attacker to cause a stack overflow that could allow remote code execution wi…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08711 Published 2017-03-22 No fix listed CWE-119
TI-2023-06784 CVE-2023-20076 · GHSA-q7pv-4cxx-gq42

Cisco IOx Application Hosting Environment Command Injection Vulnerability

Priority MEDIUM 43

A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01506 Published 2023-02-12 No fix listed CWE-233
TI-2017-02948 CVE-2017-3851 · GHSA-rv9w-q754-5cw5

Path traversal in Cisco Application-Hosting Framework

Priority MEDIUM 41

A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an unauthenticated, remote attacker to read an…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05207 Published 2017-03-22 No fix listed CWE-22
TI-2017-02949 CVE-2017-3852 · GHSA-24qc-25f9-3h95

Improper input validation in Cisco Application-Hosting Framework

Priority MEDIUM 40

A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance…

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.02531 Published 2017-03-22 No fix listed CWE-20
TI-2020-02798 CVE-2020-3238 · GHSA-vwph-w88h-2p73

Cisco IOx Application Framework Arbitrary File Creation Vulnerability

Priority LOW 38

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance that is runni…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01235 Published 2020-06-03 No fix listed CWE-20
TI-2016-07528 CVE-2016-9199 · GHSA-4vr9-3763-mphq

Path traversal in Cisco IOx

Priority LOW 34

A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02517 Published 2016-12-14 No fix listed CWE-22
TI-2020-02797 CVE-2020-3237 · GHSA-wpf6-xqrg-67f3

Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability

Priority LOW 30

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, local attacker to overwrite arbitrary files in the virtual instance that is running on t…

CVSS 3.1MEDIUM 6.3 Local High privileges No interaction EPSS 0.0035 Published 2020-06-03 No fix listed CWE-59
TI-2017-02903 CVE-2017-3805 · GHSA-c6xp-2qqh-7vvr

Information disclosure in Cisco IOS and Cisco IOx

Priority LOW 27

A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the d…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01584 Published 2017-01-26 No fix listed CWE-200
TI-2020-02793 CVE-2020-3233 · GHSA-g8jq-xwcj-j8m3

Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability

Priority LOW 25

A vulnerability in the web-based Local Manager interface of the Cisco IOx Application Framework could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the we…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00633 Published 2020-06-03 No fix listed CWE-79
Open these records in search →