Cisco

Records7060All Threatist records

Exploited (KEV)107In CISA KEV

CVSS critical694CVSS 9.0–10.0

CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability CRITICAL 94KEV 2026-10-29 TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CRITICAL 100KEV 2026-10-14 TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CRITICAL 100KEV 2026-09-30 TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CRITICAL 100KEV 2026-09-16 TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability CRITICAL 100KEV 2026-09-14 TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records

Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

9 records in Unified Web And E-mail Interaction Manager · all components

TI-2015-03608 CVE-2015-4298 · GHSA-2fw2-hj8q-m4ff

Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs…

LOW 34

Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows remote authenticated users to read or write to stored data via unspecified vectors, aka Bug ID CSCuo8905…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02456 Published 2015-08-19 No fix listed CWE-284

TI-2015-00701 CVE-2015-0753 · GHSA-q72j-7jh9-2m5f

SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified…

LOW 34

SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01827 Published 2015-05-29 No fix listed CWE-20

TI-2014-01737 CVE-2014-2194 · GHSA-8p8c-35g9-84ww

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2)…

LOW 33

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01249 Published 2014-05-20 No fix listed CWE-20

TI-2015-03609 CVE-2015-4299 · GHSA-vcfj-wrxg-9cqm

Cisco Unified Web and E-Mail Interaction Manager 9.0(2) improperly performs…

LOW 30

Cisco Unified Web and E-Mail Interaction Manager 9.0(2) improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders via unspecified vectors, aka Bug ID CSCu…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02456 Published 2015-08-19 No fix listed CWE-284

TI-2015-05247 CVE-2015-6255 · GHSA-ggwp-6vxp-fx75

Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction…

LOW 25

Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via a crafted chat message, aka Bug ID CSCuo89051.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02314 Published 2015-08-19 No fix listed CWE-79

TI-2015-05399 CVE-2015-6416 · GHSA-q99c-4hvr-6ffx

Cross-site scripting (XSS) vulnerability in Cisco Unified Email Interaction Manager and…

LOW 24

Cross-site scripting (XSS) vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.0(1) allows remote attackers to inject arbitrary web script or HTML a crafted URL, aka Bug ID CSC…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01786 Published 2015-12-14 No fix listed CWE-79

TI-2015-00606 CVE-2015-0655 · GHSA-528x-v7mh-jgf9

Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco…

LOW 24

Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01773 Published 2015-02-28 No fix listed CWE-79

TI-2014-01736 CVE-2014-2193 · GHSA-qp2p-gxc5-fcfh

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET…

LOW 22

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00958 Published 2014-05-20 No fix listed CWE-20

TI-2014-01735 CVE-2014-2192 · GHSA-w2gq-g8ph-796v

Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction…

LOW 22

Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2014-05-20 No fix listed CWE-79

Open these records in search →

Critical	694
High	2793
Medium	3496
Low	75
No CVSS	2