Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

16 records in Webex Training Center · all components

TI-2017-04508 CVE-2017-6753 · GHSA-j6hm-qxwv-3jwr

Memory corruption in Cisco WebEx Browser Extension

Priority MEDIUM 47

A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.05951 Published 2017-07-25 No fix listed CWE-119
TI-2019-12027 CVE-2019-15987 · GHSA-99jc-7925-7fc9

Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability

Priority LOW 33

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account u…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01581 Published 2019-11-26 No fix listed CWE-287
TI-2013-00958 CVE-2013-1109 · GHSA-xvxq-r6r9-xm62

Cross-site request forgery (CSRF) vulnerability in testingLibraryAction.do in the…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0057 Published 2013-01-17 No fix listed CWE-352
TI-2013-05729 CVE-2013-6968 · GHSA-964q-9m59-j738

Cisco WebEx Training Center provides different error messages for registration attempts…

Priority LOW 28

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka B…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02457 Published 2013-12-14 No fix listed CWE-200
TI-2013-05527 CVE-2013-6709 · GHSA-5q4g-hqx9-m5x4

The registration component in Cisco WebEx Training Center provides the training-session…

Priority LOW 26

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference b…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01703 Published 2013-12-14 No fix listed CWE-200
Open these records in search →