Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

12 records in Unified Computing System Central Software · all components

TI-2018-00088 CVE-2018-0113 · GHSA-4vp2-8c9h-5h96

Improper input validation in Cisco UCS Central

Priority MEDIUM 44

A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02227 Published 2018-02-08 No fix listed CWE-20
TI-2018-00069 CVE-2018-0094 · GHSA-62jr-4pg7-4vr2

Protection mechanism failure in Cisco UCS Central Software

Priority MEDIUM 43

A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted de…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02297 Published 2018-01-18 No fix listed CWE-693
TI-2017-09121 CVE-2017-12349 · GHSA-cvvh-736r-7rrr

Cross-site scripting in Cisco UCS Central Software

Priority LOW 26

Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00891 Published 2017-11-30 No fix listed CWE-79
TI-2017-09120 CVE-2017-12348 · GHSA-87q6-h526-grhm

Cross-site scripting in Cisco UCS Central Software

Priority LOW 26

Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00891 Published 2017-11-30 No fix listed CWE-79
TI-2021-01081 CVE-2021-1354 · GHSA-grv9-44cv-g58h

Cisco Unified Computing System Central Software Improper Certificate Validation Vulnerability

Priority LOW 20

A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00421 Published 2021-02-04 No fix listed CWE-295
Open these records in search →