Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

10 records in Webex · all components

TI-2017-02920 CVE-2017-3823 · GHSA-jvxg-m38c-9fg2

Memory corruption in Cisco WebEx browser extensions

Priority MEDIUM 60

An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class ActiveX control plugin before 10031.6.201…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.27231 Published 2017-02-01 No fix listed CWE-119
TI-2009-02742 CVE-2009-2879 · GHSA-5v9w-r7h8-v3f2

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before…

Priority MEDIUM 48

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 2…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05127 Published 2009-12-18 No fix listed CWE-119
TI-2009-02741 CVE-2009-2878 · GHSA-j5v5-fpm8-w528

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before…

Priority MEDIUM 48

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 2…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05133 Published 2009-12-18 No fix listed CWE-119
TI-2009-02739 CVE-2009-2876 · GHSA-cr8h-fpgg-m55q

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before…

Priority MEDIUM 48

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 2…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05133 Published 2009-12-18 No fix listed CWE-119
TI-2026-16358 CVE-2026-20149 · GHSA-wgqr-v4gj-r4jj

Cross-site scripting in Cisco Webex Meetings

Priority LOW 27

A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2026-03-04 No fix listed CWE-79
TI-2013-02992 CVE-2013-3425 · GHSA-5w5x-ffjj-2495

The Meeting Center component in Cisco WebEx 11 generates different error messages for…

Priority LOW 21

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a seri…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01082 Published 2013-07-31 No fix listed CWE-264
Open these records in search →