Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

9 records in Mediasense · all components

TI-2017-09109 CVE-2017-12337 · GHSA-rg7v-73fx-2hfh

Improper authentication in Cisco Voice Operating System

Priority MEDIUM 51

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access t…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06435 Published 2017-11-16 No fix listed CWE-287
TI-2017-04533 CVE-2017-6779 · GHSA-jfgw-vvcr-pv6q

Resource management flaw in Multiple Cisco Products unknown

Priority MEDIUM 43

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utiliz…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01984 Published 2018-06-07 No fix listed CWE-399
TI-2013-04698 CVE-2013-5502 · GHSA-j8f3-8cwh-jxqr

The web interface in Cisco MediaSense does not properly protect the client-server…

Priority LOW 26

The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to obtain sensitive query string or cookie information via unspecified vectors, aka B…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01354 Published 2013-09-23 No fix listed CWE-264
TI-2013-04696 CVE-2013-5500 · GHSA-cvpg-98r4-hvwc

Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco…

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSC…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01773 Published 2013-09-20 No fix listed CWE-79
Open these records in search →