cisco Vulnerability Advisory Catalog

Total 6,579 security vulnerabilities recorded for cisco software and firmware.

← Back to All Vendors
Component: catalyst_sd-wan_manager

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only ...

📅 2026-05-14
CVSS 5.4 Dossier →
Component: catalyst_sd-wan_manager

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only ...

📅 2026-05-14
CVSS 5.4 Dossier →
CVE-2026-20182 CRITICAL
Component: catalyst_sd-wan_manager

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed i...

📅 2026-05-14
CVSS 10.0 Dossier →
Component: identity_services_engine

A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to enumerate valid user accounts o...

📅 2026-05-06
CVSS 5.3 Dossier →
Component: identity_services_engine

A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privil...

📅 2026-05-06
CVSS 4.3 Dossier →
Component: prime_infrastructure

A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download ar...

📅 2026-05-06
CVSS 4.3 Dossier →
Component: iot_field_network_director

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privi...

📅 2026-05-06
CVSS 6.4 Dossier →
Component: iot_field_network_director

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privi...

📅 2026-05-06
CVSS 6.5 Dossier →
Component: iot_field_network_director

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privi...

📅 2026-05-06
CVSS 7.7 Dossier →
Component: unity_connection

A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an a...

📅 2026-05-06
CVSS 7.2 Dossier →
Component: unity_connection

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary cod...

📅 2026-05-06
CVSS 8.8 Dossier →
Component: intersight_device_connector

An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthr...

📅 2026-04-28
CVSS 8.2 Dossier →
CVE-2026-20186 CRITICAL
Component: identity_services_engine

A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying ...

📅 2026-04-15
CVSS 9.9 Dossier →
CVE-2026-20180 CRITICAL
Component: identity_services_engine

A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying ...

📅 2026-04-15
CVSS 9.9 Dossier →
Component: webex_contact_center

A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cro...

📅 2026-04-15
CVSS 6.1 Dossier →
Component: identity_services_engine

A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying opera...

📅 2026-04-15
CVSS 4.9 Dossier →
CVE-2026-20147 CRITICAL
Component: identity_services_engine_passive_identity_connector

A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating...

📅 2026-04-15
CVSS 9.9 Dossier →
Component: identity_services_engine

A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticate...

📅 2026-04-15
CVSS 6.0 Dossier →
Component: identity_services_engine

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker w...

📅 2026-04-15
CVSS 4.8 Dossier →
Component: unity_connection

Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected sys...

📅 2026-04-15
CVSS 6.5 Dossier →
Component: unity_connection

Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected sys...

📅 2026-04-15
CVSS 6.5 Dossier →
Component: unity_connection

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL inject...

📅 2026-04-15
CVSS 4.3 Dossier →
Component: unity_connection

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to ...

📅 2026-04-15
CVSS 4.7 Dossier →
Component: unity_connection

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected...

📅 2026-04-15
CVSS 6.1 Dossier →
Page 2 of 275 (6,579 Total Records)