Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

10 records in Umbrella · all components

TI-2019-01430 CVE-2019-1807 · GHSA-6vf3-jgh6-2pvc

Cisco Umbrella Dashboard Session Management Vulnerability

Priority MEDIUM 43

A vulnerability in the session management functionality of the web UI for the Cisco Umbrella Dashboard could allow an authenticated, remote attacker to access the Dashboard via an active, user session.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01484 Published 2019-05-03 No fix listed CWE-384
TI-2018-00394 CVE-2018-0435 · GHSA-6frj-jhq2-gcfc

Cisco Umbrella API Unauthorized Access Vulnerability

Priority MEDIUM 41

A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations.

CVSS 3.0CRITICAL 9.1 Network Low privileges No interaction EPSS 0.01094 Published 2018-10-05 No fix listed CWE-287
TI-2021-01201 CVE-2021-1474 · GHSA-382q-3qj5-29mx

Cisco Umbrella Link and CSV Formula Injection Vulnerabilities

Priority LOW 39

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected de…

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00748 Published 2021-04-08 No fix listed CWE-1236
TI-2021-01077 CVE-2021-1350 · GHSA-28r8-9g34-2x25

Cisco Umbrella Dashboard Packet Flood Vulnerability

Priority LOW 33

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01297 Published 2021-01-20 No fix listed CWE-770
TI-2021-01202 CVE-2021-1475 · GHSA-639r-6p24-c5mm

Cisco Umbrella Link and CSV Formula Injection Vulnerabilities

Priority LOW 30

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected de…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00761 Published 2021-04-08 No fix listed CWE-1236
TI-2019-01417 CVE-2019-1792 · GHSA-2ph5-82ch-xwq8

Cisco Umbrella Cross-Site Scripting Vulnerability

Priority LOW 30

A vulnerability in the URL block page of Cisco Umbrella could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user in a network protected by Umbrella.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01211 Published 2019-04-18 No fix listed CWE-79
TI-2020-02889 CVE-2020-3337 · GHSA-hf79-5ffr-p77w

Cisco Umbrella Open Redirect Vulnerability

Priority LOW 29

A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to redirect a user to an undesired web page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00815 Published 2020-06-18 No fix listed CWE-601
TI-2022-05527 CVE-2022-20969 · GHSA-9gq7-wh84-7mpf

Cross-site scripting in Cisco Umbrella Dashboard

Priority LOW 25

A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the Cisco Umbrella dashboard.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00538 Published 2022-11-03 No fix listed CWE-79
TI-2021-17321 CVE-2021-40126 · GHSA-qh32-c3pp-x33g

Cisco Umbrella Email Enumeration Vulnerability

Priority LOW 22

A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the Umbrella infrastructure.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00873 Published 2021-11-04 No fix listed CWE-210
TI-2020-02806 CVE-2020-3246 · GHSA-j53q-vx25-fmqm

Cisco Umbrella Carriage Return Line Feed Injection Vulnerability

Priority LOW 22

A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to perform a carriage return line feed (CRLF) injection attack against a user of an affected service.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.009 Published 2020-05-06 No fix listed CWE-93
Open these records in search →