Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

14 records in Smart Software Manager On-prem · all components

TI-2024-13352 CVE-2024-20419 · GHSA-5697-p67m-73p6

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM…

Priority CRITICAL 89

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.80917 Published 2024-07-17 No fix listed CWE-620
TI-2020-02720 CVE-2020-3158 · GHSA-qvcr-mg85-mjgg

Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

Priority MEDIUM 52

A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02582 Published 2020-02-19 No fix listed CWE-798
TI-2026-16368 CVE-2026-20160 · GHSA-wmm4-pvrx-wvv8

Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability

Priority MEDIUM 51

A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected SSM On-Prem host.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0093 Published 2026-04-01 No fix listed CWE-668
TI-2019-12064 CVE-2019-16029 · GHSA-v2h7-ph6x-hrqm

Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

Priority MEDIUM 47

A vulnerability in the application programming interface (API) of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from loggi…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01073 Published 2020-01-26 No fix listed CWE-20
TI-2020-02991 CVE-2020-3443 · GHSA-f37p-j83j-rx9j

Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability

Priority MEDIUM 44

A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01792 Published 2020-08-26 No fix listed CWE-264
TI-2021-13764 CVE-2021-34766 · GHSA-8mp4-67gg-gvgw

Cisco Smart Software Manager Privilege Escalation Vulnerability

Priority MEDIUM 40

A vulnerability in the web UI of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00974 Published 2021-10-06 No fix listed CWE-269
TI-2021-00949 CVE-2021-1222 · GHSA-4f4x-g56g-xrm8

Cisco Smart Software Manager Satellite SQL Injection Vulnerability

Priority MEDIUM 40

A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01262 Published 2021-01-20 No fix listed CWE-89
TI-2022-05367 CVE-2022-20808 · GHSA-j3x4-2rgc-65g3

Cisco Smart Software Manager On-Prem Denial of Service Vulnerability

Priority LOW 36

A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.01049 Published 2022-07-06 No fix listed CWE-400
TI-2021-00946 CVE-2021-1219 · GHSA-2mxg-rvhc-jqf9

Cisco Smart Software Manager Satellite Static Credential Vulnerability

Priority LOW 36

A vulnerability in Cisco Smart Software Manager Satellite could allow an authenticated, local attacker to access sensitive information on an affected system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00259 Published 2021-01-20 No fix listed CWE-798
TI-2026-16360 CVE-2026-20151 · GHSA-753x-3fmj-hv4q

Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability

Priority LOW 34

A vulnerability in the web interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges on an affected system.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00275 Published 2026-04-01 No fix listed CWE-201
TI-2020-02805 CVE-2020-3245 · GHSA-6j6p-hrf6-6wxj

Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability

Priority LOW 32

A vulnerability in the web application of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to create arbitrary user accounts.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01207 Published 2020-06-18 No fix listed CWE-284
TI-2023-06817 CVE-2023-20110 · GHSA-5wmv-9m87-jx6x

Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

Priority LOW 31

A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01152 Published 2023-05-18 No fix listed CWE-89
TI-2021-00945 CVE-2021-1218 · GHSA-hr96-643c-qp42

Cisco Smart Software Manager Satellite Open Redirect Vulnerability

Priority LOW 25

A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, remote attacker to redirect a user to an undesired web page.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00571 Published 2021-01-20 No fix listed CWE-601
TI-2022-05498 CVE-2022-20939 · GHSA-497w-6wcv-pw45

Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability

Priority LOW 21

A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00611 Published 2024-11-15 No fix listed CWE-922
Open these records in search →