Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

8 records in Ironport Encryption Appliance · all components

TI-2009-00054 CVE-2009-0056 · GHSA-xpwj-fc4j-cfm5

Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00547 Published 2009-01-16 No fix listed CWE-352
TI-2009-00053 CVE-2009-0055 · GHSA-vrcv-x9c3-49fm

Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco…

Priority LOW 30

Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00448 Published 2009-01-16 No fix listed CWE-352
TI-2012-00325 CVE-2012-0340 · GHSA-h8v8-qj93-444w

Cross-site scripting (XSS) vulnerability in the management interface on the Cisco…

Priority LOW 21

Cross-site scripting (XSS) vulnerability in the management interface on the Cisco IronPort Encryption Appliance with software before 6.5.3 allows remote attackers to inject arbitrary web script or HTML via the header par…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00525 Published 2012-02-13 No fix listed CWE-79
TI-2009-00052 CVE-2009-0054 · GHSA-j683-fhh5-5fp7

PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5…

Priority LOW 21

PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00788 Published 2009-01-16 No fix listed CWE-255
TI-2009-00051 CVE-2009-0053 · GHSA-cr78-559x-ch5j

PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5…

Priority LOW 21

PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00788 Published 2009-01-16 No fix listed CWE-310
Open these records in search →