Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

13 records in Socialminer · all components

TI-2017-09109 CVE-2017-12337 · GHSA-rg7v-73fx-2hfh

Improper authentication in Cisco Voice Operating System

Priority MEDIUM 51

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access t…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06435 Published 2017-11-16 No fix listed CWE-287
TI-2017-08995 CVE-2017-12216 · GHSA-8cxf-788q-xf3g

Information disclosure in Cisco SocialMiner

Priority MEDIUM 43

A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write access to information stored in the affected system.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02916 Published 2017-09-07 No fix listed CWE-200
TI-2017-04533 CVE-2017-6779 · GHSA-jfgw-vvcr-pv6q

Resource management flaw in Multiple Cisco Products unknown

Priority MEDIUM 43

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utiliz…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01984 Published 2018-06-07 No fix listed CWE-399
TI-2018-00249 CVE-2018-0290 · GHSA-8f5c-4jx4-7pq4

Resource management flaw in Cisco SocialMiner Notification System

Priority LOW 33

A vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the notification system.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01565 Published 2018-05-17 No fix listed CWE-399
TI-2025-14575 CVE-2025-20278 · GHSA-qvpj-hmr8-j79p

Cisco Unified Communications Products Command Injection Vulnerability

Priority LOW 31

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00188 Published 2025-06-04 No fix listed CWE-77
TI-2019-01294 CVE-2019-1668 · GHSA-8x4w-mfgj-fgpr

Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerability

Priority LOW 30

A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting (XSS) attacks against a user of the web-based user interface of an affected sy…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01271 Published 2019-01-24 No fix listed CWE-79
TI-2018-10995 CVE-2018-15435 · GHSA-3rg4-hj48-mg5j

Cisco SocialMiner Cross-Site Scripting Vulnerability

Priority LOW 30

A vulnerability in the web-based management interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01211 Published 2018-10-17 No fix listed CWE-79
TI-2017-04458 CVE-2017-6702 · GHSA-mqfj-c36c-f5jf

Cross-site scripting in Cisco SocialMiner

Priority LOW 30

A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0128 Published 2017-07-04 No fix listed CWE-79
TI-2013-04686 CVE-2013-5489 · GHSA-72vx-3m42-xvc7

The gadget implementation in Cisco SocialMiner does not properly restrict the content of…

Priority LOW 26

The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server R…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01354 Published 2013-09-13 No fix listed CWE-264
TI-2025-14430 CVE-2025-20129 · GHSA-xpgj-x2hj-7mq2

Cisco Customer Collaboration Platform Information Disclosure Vulnerability

Priority LOW 25

A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00426 Published 2025-06-04 No fix listed CWE-200
Open these records in search →