Cisco vulnerabilities
3,442 CVEs and advisories name Cisco as an affected vendor, 63 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-20289Cisco NX-OS Software Command Injection Vulnerability
- CVE-2024-20478Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
- CVE-2024-20411Cisco NX-OS Bash Arbitrary Code Execution Vulnerability
- CVE-2024-20413Cisco NX-OS Bash Privilege Escalation Vulnerability
- CVE-2024-20279Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability
- CVE-2024-20417Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabities
- CVE-2024-20466Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability
- CVE-2024-20486Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability
- CVE-2024-20488Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
- CVE-2024-20375A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Ma
- CVE-2024-20451Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA5
- CVE-2024-20454Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA5
- CVE-2024-20450Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA5
- CVE-2024-20479A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack…
- CVE-2024-20443A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack…
- CVE-2024-20396A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain access to sensitive info
- CVE-2024-20395A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to
- CVE-2024-20400A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect
- CVE-2024-20429A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacke
- CVE-2024-20416A vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to
- CVE-2024-20323A vulnerability in Cisco Intelligent Node (iNode) Software could allow an unauthenticated, remote attacker to hijack the TLS connection betw
- CVE-2024-20296A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker
- CVE-2024-20435A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary comma
- CVE-2024-20419A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote…
- CVE-2024-20401A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote
- CVE-2024-20456A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the
- CVE-2024-20399Cisco NX-OS Software CLI Command Injection Vulnerability
- CVE-2024-20405A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored X
- CVE-2024-20404A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF at
- CVE-2024-20360A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remo