Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

11 records in Unified Operations Manager · all components

TI-2009-01101 CVE-2009-1161 · GHSA-p549-g2jj-vm8x

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services…

Priority MEDIUM 60

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessme…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.16532 Published 2009-05-21 No fix listed CWE-22
TI-2010-02906 CVE-2010-3036 · GHSA-36rh-2x2f-hxh9

Multiple buffer overflows in the authentication functionality in the web-server module in…

Priority MEDIUM 52

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05992 Published 2010-10-29 No fix listed CWE-119
TI-2011-00833 CVE-2011-0962 · GHSA-hq75-7jp8-q8x3

Cross-site scripting (XSS) vulnerability in…

Priority LOW 29

Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before 8.6 allows remote attackers to inject a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06502 Published 2011-05-20 No fix listed CWE-79
TI-2013-04685 CVE-2013-5488 · GHSA-x4cm-7ff7-8m4h

Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco…

Priority LOW 26

Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ compo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0157 Published 2013-09-12 No fix listed CWE-20
TI-2013-02983 CVE-2013-3416 · GHSA-6qx7-j54g-9782

Cross-site scripting (XSS) vulnerability in the web framework in the…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Operations Manager and Unified Service Monitor allows remote attackers to inject arbi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2013-07-10 No fix listed CWE-79
Open these records in search →