Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

10 records in Web Security Virtual Appliance · all components

TI-2017-04506 CVE-2017-6751 · GHSA-78hh-rj37-p22v

Improper input validation in Cisco Web Security Appliance

Priority LOW 37

A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the admini…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01963 Published 2017-07-25 No fix listed CWE-20
TI-2017-04503 CVE-2017-6748 · GHSA-r5r7-8mwx-vxq9

Injection in Cisco Web Security Appliance

Priority LOW 31

A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00818 Published 2017-07-25 No fix listed CWE-74
TI-2015-03535 CVE-2015-4216 · GHSA-775r-5j4x-p42j

The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security…

Priority LOW 29

The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH roo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03292 Published 2015-06-26 No fix listed CWE-200
TI-2017-04504 CVE-2017-6749 · GHSA-532j-mh9h-gc6c

Cross-site scripting in Cisco Web Security Appliance

Priority LOW 27

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-ba…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01228 Published 2017-07-25 No fix listed CWE-79
TI-2015-03536 CVE-2015-4217 · GHSA-rwpv-8h6r-wrrr

The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security…

Priority LOW 24

The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH hos…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02225 Published 2015-06-26 No fix listed CWE-200
TI-2021-00998 CVE-2021-1271 · GHSA-xp9j-q8vg-2xqp

Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability

Priority LOW 23

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00797 Published 2021-01-20 No fix listed CWE-79
Open these records in search →