Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

9 records in Ucs Manager · all components

TI-2020-02681 CVE-2020-3119 · GHSA-wq2m-fgj4-27jc

Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability

Priority MEDIUM 48

A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.04784 Published 2020-02-05 Fixed in 9.3(2) CWE-787
TI-2020-08191 CVE-2020-10136 · GHSA-8gxc-83hw-9578

IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

Priority MEDIUM 47

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.28537 Published 2020-06-02 No fix listed CWE-290
TI-2020-02734 CVE-2020-3172 · GHSA-cvm3-233f-g2vf

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability

Priority MEDIUM 44

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (Do…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01894 Published 2020-02-26 No fix listed CWE-20
TI-2020-02729 CVE-2020-3167 · GHSA-x3p6-6j82-7c7q

Cisco FXOS and UCS Manager Software CLI Command Injection Vulnerability

Priority LOW 38

A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00898 Published 2020-02-26 No fix listed CWE-78
TI-2020-02735 CVE-2020-3173 · GHSA-v2mf-949v-6qrh

Cisco UCS Manager Software Local Management CLI Command Injection Vulnerability

Priority LOW 36

A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) on an affected dev…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00439 Published 2020-02-26 No fix listed CWE-78
TI-2020-02682 CVE-2020-3120 · GHSA-vw86-rxwf-9vhm

Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability

Priority LOW 32

A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected d…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01639 Published 2020-02-05 Fixed in 2.3.1.173 CWE-190
TI-2021-01124 CVE-2021-1397 · GHSA-rwcp-hmqx-m9f3

Cisco Integrated Management Controller Open Redirect Vulnerability

Priority LOW 29

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00831 Published 2021-05-06 No fix listed CWE-601
TI-2025-14593 CVE-2025-20296 · GHSA-5vg9-8p76-hvjm

Cisco UCS Manager Software Stored Software Stored Cross-Site Scripting Vulnerability

Priority LOW 24

A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00234 Published 2025-08-27 No fix listed CWE-79
Open these records in search →