Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

14 records in Unified Contact Center Enterprise · all components

TI-2021-19919 CVE-2021-44228 · GHSA-jfh8-c2jp-5v3q

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
TI-2025-14542 CVE-2025-20242 · GHSA-3h4g-vcc2-xxf3

Improper access control in Cisco Unified Contact Center Enterprise

Priority MEDIUM 54

A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affected device.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.05895 Published 2025-05-21 No fix listed CWE-284
TI-2023-06769 CVE-2023-20061 · GHSA-6mvc-xj8r-v5fh

Cisco Unified Intelligence Center Vulnerabilities

Priority LOW 30

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00731 Published 2023-03-03 No fix listed CWE-200
TI-2023-06770 CVE-2023-20062 · GHSA-rpch-gp56-fxr3

Cisco Unified Intelligence Center Vulnerabilities

Priority LOW 29

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00525 Published 2023-03-03 No fix listed CWE-200
TI-2021-01122 CVE-2021-1395 · GHSA-4786-jhx6-3pjr

Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability

Priority LOW 29

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00813 Published 2021-06-16 No fix listed CWE-79
TI-2023-06766 CVE-2023-20058 · GHSA-j34c-3gp7-29jp

Cross-site scripting in Cisco Unified Contact Center Enterprise

Priority LOW 28

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the in…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00506 Published 2023-01-19 No fix listed CWE-79
TI-2020-02725 CVE-2020-3163 · GHSA-759q-wfqr-9x82

Cisco Unified Contact Center Enterprise Denial of Service Vulnerability

Priority LOW 28

A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00895 Published 2020-02-19 No fix listed CWE-362
TI-2017-04385 CVE-2017-6626 · GHSA-gx27-45px-h274

Information disclosure in Cisco Finesse for Cisco Unified Contact Center Enterprise

Priority LOW 28

A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow an unauthenticated, remote attacker to retrieve information from agents using t…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02301 Published 2017-05-03 No fix listed CWE-200
TI-2014-01726 CVE-2014-2180 · GHSA-c2gv-m57j-hq74

The Document Management component in Cisco Unified Contact Center Express does not…

Priority LOW 20

The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request,…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00764 Published 2014-04-29 No fix listed CWE-20
Open these records in search →