Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

8 records in Prime Lan Management Solution · all components

TI-2012-05167 CVE-2012-6392 · GHSA-4492-w4rj-26wg

Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux does not properly…

Priority MEDIUM 50

Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute arbitrary commands via a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04635 Published 2013-01-17 No fix listed CWE-20
TI-2017-09004 CVE-2017-12225 · GHSA-mq32-h66w-p4v5

Improper authentication in Cisco Prime LAN Management Solution

Priority LOW 33

A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote attacker to hijack another user's administrative session, aka a Session Fixation Vulnerability.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01961 Published 2017-09-07 No fix listed CWE-287
TI-2016-01251 CVE-2016-1360 · GHSA-38xx-66hg-2779

Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption…

Priority LOW 31

Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, which allows local users to obtain cleartext data by leveraging console connectivit…

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00305 Published 2016-03-12 No fix listed CWE-200
TI-2013-01042 CVE-2013-1196 · GHSA-2x3p-pc2g-c463

The command-line interface in Cisco Secure Access Control System (ACS), Identity Services…

Priority LOW 30

The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.003 Published 2013-04-29 No fix listed CWE-20
TI-2013-00974 CVE-2013-1125 · GHSA-fj3m-94pr-x36q

The command-line interface in Cisco Identity Services Engine Software, Secure Access…

Priority LOW 30

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Co…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.003 Published 2013-02-19 No fix listed CWE-20
TI-2013-04685 CVE-2013-5488 · GHSA-x4cm-7ff7-8m4h

Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco…

Priority LOW 26

Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ compo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0157 Published 2013-09-12 No fix listed CWE-20
TI-2013-04681 CVE-2013-5482 · GHSA-4hw6-q38g-g8fh

Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME…

Priority LOW 22

Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01169 Published 2013-09-13 No fix listed CWE-264
Open these records in search →