Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

8 records in Secure Network Analytics · all components

TI-2022-05356 CVE-2022-20797 · GHSA-q878-24h5-xfhg

Cisco Secure Network Analytics Remote Code Execution Vulnerability

Priority MEDIUM 43

A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, could allow an authenticated, remote attacker to execute arbitrary commands as an administr…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01687 Published 2022-05-27 No fix listed CWE-20
TI-2023-06809 CVE-2023-20102 · GHSA-4rvx-m2x5-qg3f

Cisco Secure Network Analytics Remote Code Execution Vulnerability

Priority MEDIUM 42

A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01005 Published 2023-04-05 No fix listed CWE-502
TI-2025-14554 CVE-2025-20256 · GHSA-w687-qrqx-jr57

Cisco Secure Network Analytics Manager Server-Side Template Injection Vulnerability

Priority LOW 35

A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with valid administrative c…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00625 Published 2025-05-21 No fix listed CWE-74
TI-2025-14478 CVE-2025-20178 · GHSA-vr9w-fp6c-vj58

Cisco Secure Network Analytics Privilege Escalation Vulnerability

Priority LOW 34

A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the und…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00372 Published 2025-04-16 No fix listed CWE-347
TI-2023-06810 CVE-2023-20103 · GHSA-p3w4-57rf-g962

Cisco Secure Network Analytics Remote Code Execution Vulnerability

Priority LOW 33

A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00897 Published 2023-04-05 No fix listed CWE-20
TI-2025-14555 CVE-2025-20257 · GHSA-g6hf-3766-f3gv

Cisco Secure Network Analytics API Authorization Vulnerability

Priority LOW 29

A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with low privileges to generate fraudulent fi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00339 Published 2025-05-21 No fix listed CWE-863
TI-2022-05222 CVE-2022-20663 · GHSA-wp86-vvx6-h6hq

Secure Network Analytics Cross-Site Scripting Vulnerability

Priority LOW 28

A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) atta…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00515 Published 2024-11-15 No fix listed CWE-79
TI-2022-05300 CVE-2022-20741 · GHSA-gprg-39c4-4p7r

Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability

Priority LOW 25

A vulnerability in the web-based management interface of the Network Diagrams application for Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could allow an authenticated, remote attacker to conduct a c…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0058 Published 2022-04-06 No fix listed CWE-79
Open these records in search →