Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

25 records in Unified Meetingplace · all components

TI-2015-00653 CVE-2015-0702 · GHSA-rmw7-97r7-cgc9

Unrestricted file upload vulnerability in the Custom Prompts upload implementation in…

Priority MEDIUM 44

Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName paramet…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02923 Published 2015-04-21 No fix listed CWE-20
TI-2010-00134 CVE-2010-0139 · GHSA-2rfx-cf2v-2f6c

Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly…

Priority MEDIUM 43

Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspec…

CVSS 2.0HIGH 9.0 Network No auth Interaction — EPSS 0.0201 Published 2010-01-28 No fix listed CWE-89
TI-2015-00656 CVE-2015-0705 · GHSA-wpjr-v5gv-9429

Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the…

Priority LOW 33

Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to hijack the authentication of administrators for re…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01278 Published 2015-04-22 No fix listed CWE-352
TI-2013-00975 CVE-2013-1128 · GHSA-qmw9-3g8j-h73f

Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified…

Priority LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, ak…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00636 Published 2013-02-15 No fix listed CWE-352
TI-2011-03715 CVE-2011-4232 · GHSA-hqm4-73mw-3x29

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for…

Priority LOW 25

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a seri…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0116 Published 2012-05-03 No fix listed CWE-200
TI-2013-00972 CVE-2013-1123 · GHSA-3cv6-rq95-c6hf

Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSC…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01284 Published 2013-02-15 No fix listed CWE-79
TI-2015-00706 CVE-2015-0758 · GHSA-5qcv-vq3q-6hmj

The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote…

Priority LOW 22

The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, r…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01648 Published 2015-05-30 No fix listed CWE-200
TI-2009-00708 CVE-2009-0743 · GHSA-mw5g-cjmr-pr3j

Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote aut…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00896 Published 2009-02-27 No fix listed CWE-79
TI-2007-01409 CVE-2007-1467 · GHSA-m8gw-9xmq-cmmc

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2)…

Priority LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01231 Published 2007-03-16 No fix listed
Open these records in search →