cisco Vulnerability Advisory Catalog

Total 6,579 security vulnerabilities recorded for cisco software and firmware.

← Back to All Vendors
Component: firepower_threat_defense

A vulnerability in the TLS 1.3 implementation for a specific cipher for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Sec...

📅 2025-08-14
CVSS 7.7 Dossier →
CVE-2025-20337 CRITICAL
Component: identity_services_engine

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the unde...

📅 2025-07-16
CVSS 10.0 Dossier →
Component: unified_intelligence_center

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct ...

📅 2025-07-16
CVSS 5.8 Dossier →
Component: identity_services_engine

A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured...

📅 2025-07-16
CVSS 4.1 Dossier →
Component: identity_services_engine

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underl...

📅 2025-07-16
CVSS 6.5 Dossier →
Component: identity_services_engine

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underl...

📅 2025-07-16
CVSS 6.5 Dossier →
Component: unified_intelligence_center

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arb...

📅 2025-07-16
CVSS 6.3 Dossier →
Component: prime_infrastructure

A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authentica...

📅 2025-07-16
CVSS 4.3 Dossier →
CVE-2025-20309 CRITICAL
Component: unified_communications_manager

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM S...

📅 2025-07-02
CVSS 10.0 Dossier →
Component: broadworks_application_delivery_platform

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker...

📅 2025-07-02
CVSS 4.8 Dossier →
Component: enterprise_chat_and_email

A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site ...

📅 2025-07-02
CVSS 6.1 Dossier →
Component: spaces_connector

A vulnerability in Cisco Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the und...

📅 2025-07-02
CVSS 6.0 Dossier →
CVE-2025-20282 CRITICAL
Component: identity_services_engine

A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affe...

📅 2025-06-25
CVSS 10.0 Dossier →
CVE-2025-20281 CRITICAL
Component: identity_services_engine

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the unde...

📅 2025-06-25
CVSS 10.0 Dossier →
Component: identity_services_engine

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass ...

📅 2025-06-25
CVSS 6.4 Dossier →
CVE-2025-20286 CRITICAL
Component: identity_services_engine

A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engi...

📅 2025-06-04
CVSS 9.9 Dossier →
Component: unified_contact_center_express

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored XSS attac...

📅 2025-06-04
CVSS 4.8 Dossier →
Component: finesse

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary command...

📅 2025-06-04
CVSS 6.0 Dossier →
Component: unified_contact_center_express

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on a...

📅 2025-06-04
CVSS 3.4 Dossier →
Component: unified_contact_center_express

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on ...

📅 2025-06-04
CVSS 3.8 Dossier →
Component: unified_contact_center_express

A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to ex...

📅 2025-06-04
CVSS 5.3 Dossier →
Component: unified_intelligent_contact_management_enterprise

A vulnerability in the web-based management interface of Cisco Unified Intelligent Contact Management Enterprise could allow an unauthenticated, remot...

📅 2025-06-04
CVSS 6.1 Dossier →
Component: thousandeyes_endpoint_agent

Multiple vulnerabilities in the update process of Cisco ThousandEyes Endpoint Agent for Windows could allow an authenticated, local attacker to delete...

📅 2025-06-04
CVSS 5.3 Dossier →
Component: nexus_dashboard

A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to imperso...

📅 2025-06-04
CVSS 8.7 Dossier →
Page 7 of 275 (6,579 Total Records)