59.223 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Cisco vulnerabilities
6717 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2022-20676 | MED 5.1 | cisco ios_xe A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of dat | 0.3% | — |
| CVE-2013-6685 | MED 6.6 | cisco unified_ip_phone_8961 The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382. | 0.3% | — |
| CVE-2013-5506 | MED 6.6 | cisco firewall_services_module_software The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or modify any context's configuration via unspecified commands, ak | 0.3% | — |
| CVE-2025-20116 | MED 4.8 | cisco application_policy_infrastructure_controller A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform a stored XSS attack on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due | 0.3% | — |
| CVE-2024-20486 | MED 6.5 | cisco identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This vul | 0.3% | — |
| CVE-2021-34722 | MED 6.7 | cisco ios_xr Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vu | 0.3% | — |
| CVE-2021-34719 | HIGH 7.8 | cisco ios_xr Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section of th | 0.3% | — |
| CVE-2020-3151 | MED 6.7 | cisco connected_mobile_experiences A vulnerability in the CLI of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administrative credentials to bypass restrictions on the CLI. The vulnerability is due to insufficient security mechanisms in the restricte | 0.3% | — |
| CVE-2020-3530 | HIGH 8.4 | cisco ios_xr A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credential | 0.3% | — |
| CVE-2013-3409 | MED 4.3 | cisco prime_central_for_hosted_collaboration_solution The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to read these files, aka Bug IDs CSCuh33735 | 0.3% | — |
| CVE-2025-20168 | MED 5.4 | cisco common_services_platform_collector A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due t | 0.3% | — |
| CVE-2025-20167 | MED 5.4 | cisco common_services_platform_collector A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due t | 0.3% | — |
| CVE-2021-1386 | HIGH 7.0 | cisco advanced_malware_protection_for_endpoints A vulnerability in the dynamic link library (DLL) loading mechanism in Cisco Advanced Malware Protection (AMP) for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an | 0.3% | — |
| CVE-2012-4107 | MED 4.6 | cisco unified_computing_system The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary commands via crafted parameters to a file-related command, aka Bug ID CSCtq86489. | 0.3% | — |
| CVE-2021-34721 | MED 6.7 | cisco ios_xr Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vu | 0.3% | — |
| CVE-2020-3209 | MED 6.8 | cisco ios_xe A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper | 0.3% | — |
| CVE-2021-34751 | MED 4.3 | cisco secure_firewall_management_center A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege | 0.3% | — |
| CVE-2021-34750 | MED 4.3 | cisco secure_firewall_management_center A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege creden | 0.3% | — |
| CVE-2022-20849 | MED 6.1 | cisco ios_xr A vulnerability in the Broadband Network Gateway PPP over Ethernet (PPPoE) feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This vulnerability exists because the PPPoE fea | 0.3% | — |
| CVE-2021-1381 | MED 6.1 | cisco ios_xe A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authoriza | 0.3% | — |
| CVE-2020-3503 | MED 6.0 | cisco ios_xe A vulnerability in the file system permissions of Cisco IOS XE Software could allow an authenticated, local attacker to obtain read and write access to critical configuration or system files. The vulnerability is due to insufficient file system permissions on | 0.3% | — |
| CVE-2018-0449 | MED 4.2 | cisco jabber A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerabi | 0.3% | — |
| CVE-2024-20510 | MED 4.7 | cisco ios_xe A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list (ACL), which could allow access to network | 0.3% | — |
| CVE-2026-20195 | MED 5.3 | cisco identity_services_engine A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to enumerate valid user accounts on an affected device. This vulnerability exists because error messages are observed when the affected API e | 0.3% | — |
| CVE-2021-1447 | MED 6.7 | cisco content_security_management_appliance A vulnerability in the user account management system of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, local attacker to elevate their privileges to root. This vulnerability is due to a procedural flaw in the | 0.3% | — |