Cisco

Records7060All Threatist records

Exploited (KEV)107In CISA KEV

CVSS critical694CVSS 9.0–10.0

CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability CRITICAL 94KEV 2026-10-29 TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CRITICAL 100KEV 2026-10-14 TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CRITICAL 100KEV 2026-09-30 TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CRITICAL 100KEV 2026-09-16 TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability CRITICAL 100KEV 2026-09-14 TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records

Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

11 records in Telepresence Management Suite · all components

TI-2019-01286 CVE-2019-1660 · GHSA-58c5-wgv2-v53h

Cisco TelePresence Management Suite Simple Object Access Protocol Vulnerability

LOW 34

A vulnerability in the Simple Object Access Protocol (SOAP) of Cisco TelePresence Management Suite (TMS) software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02208 Published 2019-02-07 No fix listed CWE-284

TI-2019-01287 CVE-2019-1661 · GHSA-4x5m-458x-qqf8

Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability

LOW 30

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01211 Published 2019-02-07 No fix listed CWE-79

TI-2018-11027 CVE-2018-15467 · GHSA-r94p-wmp4-66fw

Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability

LOW 30

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01211 Published 2019-01-11 No fix listed CWE-79

TI-2024-13268 CVE-2024-20334 · GHSA-4v5j-ww69-fg82

Improper input validation in Cisco TelePresence Management Suite

LOW 25

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interf…

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.0038 Published 2024-04-03 No fix listed CWE-20

TI-2020-02746 CVE-2020-3185 · GHSA-4whc-9477-gmg3

Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability

LOW 25

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-ba…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00628 Published 2020-03-04 No fix listed CWE-79

TI-2013-01072 CVE-2013-1229 · GHSA-pf3r-x388-4rh6

TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite (TMS)…

LOW 25

TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite (TMS) on 64-bit platforms allows remote attackers to cause a denial of service (process crash) via SNMP traps, aka Bug ID CSCue00028.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01232 Published 2013-05-01 No fix listed CWE-20

TI-2025-14508 CVE-2025-20208 · GHSA-h8jj-4q9p-jw8c

Cross-site scripting in Cisco TelePresence Management Suite

LOW 24

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00266 Published 2025-03-05 No fix listed CWE-79

TI-2023-06953 CVE-2023-20249 · GHSA-c2pc-g3hh-8rhm

Cross-site scripting in Cisco TelePresence Management Suite

LOW 24

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00358 Published 2024-04-24 No fix listed CWE-79

TI-2023-06952 CVE-2023-20248 · GHSA-4fwm-vfjv-mj7j

Cross-site scripting in Cisco TelePresence Management Suite

LOW 24

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00358 Published 2024-04-24 No fix listed CWE-79

TI-2021-13758 CVE-2021-34760 · GHSA-q7jm-4rr7-gcqq

Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability

LOW 23

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00592 Published 2021-10-21 No fix listed CWE-79

TI-2015-00575 CVE-2015-0620 · GHSA-53r8-8q43-v88g

The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not…

LOW 21

The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01254 Published 2015-02-18 No fix listed CWE-20

Open these records in search →