Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-12629	Cisco Systems, Inc. Sd Wan Firmware	Hig	0.47	7.2	0.02	Jan 26, 2020	A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for…
CVE-2019-15985	Cisco Systems, Inc. Data Center Network Manager	Hig	0.47	7.2	0.03	Jan 6, 2020	Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative…
CVE-2019-15979	Cisco Systems, Inc. Data Center Network Manager	Hig	0.47	7.2	0.03	Jan 6, 2020	Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operating system (OS). For…
CVE-2011-2538	Cisco Systems, Inc. Video Communications Server	Hig	0.47	7.2	0.03	Oct 29, 2019	Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.
CVE-2019-12690	Cisco Systems, Inc. Firepower Management Center	Hig	0.47	7.2	0.04	Oct 2, 2019	A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the privileges of the root user of the underlying operating system. The vulnerability is due to…
CVE-2019-1896	Cisco Systems, Inc. Unified Computing System	Hig	0.47	7.2	0.02	Aug 21, 2019	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands and obtain root privileges. The vulnerability is due to insufficient validation of user-supplied input…
CVE-2019-1885	Cisco Systems, Inc. Unified Computing System	Hig	0.47	7.2	0.04	Aug 21, 2019	A vulnerability in the Redfish protocol of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on an affected device. The vulnerability is due to insufficient validation of…
CVE-2019-1871	Cisco Systems, Inc. IMC	Hig	0.47	7.2	0.03	Aug 21, 2019	A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and implement arbitrary commands with root privileges on an affected device.…
CVE-2019-1850	Cisco Systems, Inc. Unified Computing System	Hig	0.47	7.2	0.04	Aug 21, 2019	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on an affected device. An attacker would need to have…
CVE-2019-1634	Cisco Systems, Inc. Cisco Integrated Management Controller (IMC)	Hig	0.47	7.2	0.03	Aug 21, 2019	A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on the underlying operating system (OS). The…
CVE-2019-1944	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.47	7.3	0.00	Aug 7, 2019	Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information…
CVE-2019-1894	Cisco Systems, Inc. Enterprise Nfv Infrastructure Software	Hig	0.47	7.2	0.03	Jul 6, 2019	A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite or read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to…
CVE-2019-1889	Cisco Systems, Inc. Application Policy Infrastructure Controller	Hig	0.47	7.2	0.03	Jul 4, 2019	A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability is due to incomplete…
CVE-2019-1861	Cisco Systems, Inc. Industrial Network Director	Hig	0.47	7.2	0.04	Jun 5, 2019	A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of files uploaded to the affected application. An attacker could exploit…
CVE-2019-1822	Cisco Systems, Inc. Prime Infrastructure	Hig	0.47	7.2	0.04	May 16, 2019	A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This…
CVE-2019-1862	Cisco Systems, Inc. iOS Xe	Hig	0.47	7.2	0.06	May 13, 2019	A vulnerability in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software…
CVE-2019-1859	OpenSSH OpenSSH	Hig	0.47	7.2	0.01	May 3, 2019	A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication. The vulnerability exists because OpenSSH mishandles the…
CVE-2019-1756	Cisco Systems, Inc. Cisco iOS	Hig	0.47	7.2	0.04	Mar 28, 2019	A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input.…
CVE-2018-15431	Cisco Systems, Inc. Webex Network Recording Player	Hig	0.47	7.3	0.00	Oct 5, 2018	A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates…
CVE-2018-15430	Cisco Systems, Inc. Telepresence Video Communication Server	Hig	0.47	7.2	0.03	Oct 5, 2018	A vulnerability in the administrative web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with user-level privileges on the underlying operating system. The vulnerability…
CVE-2018-0440	Cisco Systems, Inc. Data Center Network Manager	Hig	0.47	7.2	0.02	Oct 5, 2018	A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating system with root-level privileges. The vulnerability is due to incomplete input validation of user…
CVE-2018-0348	Cisco Systems, Inc. Vbond Orchestrator	Hig	0.47	7.2	0.03	Jul 18, 2018	A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by…
CVE-2018-0344	Cisco Systems, Inc. Vbond Orchestrator	Hig	0.47	7.2	0.02	Jul 18, 2018	A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due…
CVE-2018-0300	Cisco Systems, Inc. Fxos	Hig	0.47	7.2	0.06	Jun 21, 2018	A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker using path traversal techniques to create or…
CVE-2018-0116	Cisco Systems, Inc. Policy Suite	Hig	0.47	7.2	0.02	Feb 8, 2018	A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized as a subscriber without providing a valid password; however, the attacker must provide a valid username. The vulnerability is due to…
CVE-2017-6746	Cisco Systems, Inc. Web Security Appliance	Hig	0.47	7.2	0.04	Jul 25, 2017	A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco…
CVE-2017-3796	Cisco Systems, Inc. Webex Meetings Server	Hig	0.47	7.2	0.02	Jan 26, 2017	A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. More Information: CSCuz03353. Known Affected Releases: 2.6.
CVE-2016-6373	Cisco Systems, Inc. Cloud Services Platform 2100	Hig	0.47	7.2	0.02	Sep 22, 2016	The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541.
CVE-2012-0384	Cisco Systems, Inc. Cisco iOS	Hig	0.47	7.2	0.04	Mar 29, 2012	Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to…
CVE-2025-20317	Cisco Systems, Inc. Ucs Manager	Hig	0.46	7.1	0.00	Aug 27, 2025	A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification…
CVE-2025-20113	Cisco Systems, Inc. Unified Intelligence Center	Hig	0.46	7.1	0.00	May 21, 2025	A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of user-supplied…
CVE-2025-20206	Cisco Systems, Inc. Secure Client	Hig	0.46	7.1	0.00	Mar 5, 2025	A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco…
CVE-2024-20421	Cisco Systems, Inc. Ata 191 Firmware	Hig	0.46	7.1	0.00	Oct 16, 2024	A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This…
CVE-2023-20253	Cisco Systems, Inc. Catalyst SD-WAN Manager	Hig	0.46	7.1	0.00	Sep 27, 2023	A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and allow the attacker to roll back the configuration on vManage controllers and edge router device. This…
CVE-2023-20168	Cisco Systems, Inc. NX-OS Software	Hig	0.46	7.1	0.00	Aug 23, 2023	A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device to unexpectedly reload. This vulnerability is due to incorrect input validation when processing an authentication…
CVE-2023-20229	Cisco Systems, Inc. Duo Device Health Application	Hig	0.46	7.1	0.00	Aug 16, 2023	A vulnerability in the CryptoService function of Cisco Duo Device Health Application for Windows could allow an authenticated, local attacker with low privileges to conduct directory traversal attacks and overwrite arbitrary files on an affected system. This vulnerability is…
CVE-2022-20956	Cisco Systems, Inc. Identity Services Engine Software	Hig	0.46	7.1	0.01	Nov 4, 2022	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files. This vulnerability is due to improper access control in the web-based management…
CVE-2022-20822	Cisco Systems, Inc. Identity Services Engine Software	Hig	0.46	7.1	0.01	Oct 26, 2022	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read and delete files on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker…
CVE-2021-34788	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Hig	0.46	7.0	0.00	Oct 6, 2021	A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture (HostScan) Module is…
CVE-2021-1567	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Hig	0.46	7.0	0.00	Jun 16, 2021	A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture (HostScan) Module is installed on the AnyConnect client.…
CVE-2021-1496	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Hig	0.46	7.0	0.01	May 6, 2021	Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1430	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Hig	0.46	7.0	0.00	May 6, 2021	Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1429	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Hig	0.46	7.0	0.00	May 6, 2021	Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1428	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Hig	0.46	7.0	0.00	May 6, 2021	Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1427	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Hig	0.46	7.0	0.00	May 6, 2021	Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1426	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Hig	0.46	7.0	0.00	May 6, 2021	Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1365	Cisco Systems, Inc. Unified Communications Manager Im And Presence Service	Hig	0.46	7.1	0.01	May 6, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper…
CVE-2021-1363	Cisco Systems, Inc. Unified Communications Manager Im And Presence Service	Hig	0.46	7.1	0.01	May 6, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper…
CVE-2021-1386	Cisco Systems, Inc. Clamav	Hig	0.46	7.0	0.00	Apr 8, 2021	A vulnerability in the dynamic link library (DLL) loading mechanism in Cisco Advanced Malware Protection (AMP) for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows…
CVE-2020-14418	Madshi Madcodehook	Hig	0.46	7.0	0.00	Jan 30, 2021	A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.

CVE-2019-12629HigJan 26, 2020
Cisco Systems, Inc.
Sd Wan Firmware
risk 0.47cvss 7.2epss 0.02
A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for…
CVE-2019-15985HigJan 6, 2020
Cisco Systems, Inc.
Data Center Network Manager
risk 0.47cvss 7.2epss 0.03
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative…
CVE-2019-15979HigJan 6, 2020
Cisco Systems, Inc.
Data Center Network Manager
risk 0.47cvss 7.2epss 0.03
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operating system (OS). For…
CVE-2011-2538HigOct 29, 2019
Cisco Systems, Inc.
Video Communications Server
risk 0.47cvss 7.2epss 0.03
Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.
CVE-2019-12690HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center
risk 0.47cvss 7.2epss 0.04
A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the privileges of the root user of the underlying operating system. The vulnerability is due to…
CVE-2019-1896HigAug 21, 2019
Cisco Systems, Inc.
Unified Computing System
risk 0.47cvss 7.2epss 0.02
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands and obtain root privileges. The vulnerability is due to insufficient validation of user-supplied input…
CVE-2019-1885HigAug 21, 2019
Cisco Systems, Inc.
Unified Computing System
risk 0.47cvss 7.2epss 0.04
A vulnerability in the Redfish protocol of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on an affected device. The vulnerability is due to insufficient validation of…
CVE-2019-1871HigAug 21, 2019
Cisco Systems, Inc.
IMC
risk 0.47cvss 7.2epss 0.03
A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and implement arbitrary commands with root privileges on an affected device.…
CVE-2019-1850HigAug 21, 2019
Cisco Systems, Inc.
Unified Computing System
risk 0.47cvss 7.2epss 0.04
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on an affected device. An attacker would need to have…
CVE-2019-1634HigAug 21, 2019
Cisco Systems, Inc.
Cisco Integrated Management Controller (IMC)
risk 0.47cvss 7.2epss 0.03
A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on the underlying operating system (OS). The…
CVE-2019-1944HigAug 7, 2019
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.47cvss 7.3epss 0.00
Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information…
CVE-2019-1894HigJul 6, 2019
Cisco Systems, Inc.
Enterprise Nfv Infrastructure Software
risk 0.47cvss 7.2epss 0.03
A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite or read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to…
CVE-2019-1889HigJul 4, 2019
Cisco Systems, Inc.
Application Policy Infrastructure Controller
risk 0.47cvss 7.2epss 0.03
A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability is due to incomplete…
CVE-2019-1861HigJun 5, 2019
Cisco Systems, Inc.
Industrial Network Director
risk 0.47cvss 7.2epss 0.04
A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of files uploaded to the affected application. An attacker could exploit…
CVE-2019-1822HigMay 16, 2019
Cisco Systems, Inc.
Prime Infrastructure
risk 0.47cvss 7.2epss 0.04
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This…
CVE-2019-1862HigMay 13, 2019
Cisco Systems, Inc.
iOS Xe
risk 0.47cvss 7.2epss 0.06
A vulnerability in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software…
CVE-2019-1859HigMay 3, 2019
OpenSSH
OpenSSH
risk 0.47cvss 7.2epss 0.01
A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication. The vulnerability exists because OpenSSH mishandles the…
CVE-2019-1756HigMar 28, 2019
Cisco Systems, Inc.
Cisco iOS
risk 0.47cvss 7.2epss 0.04
A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input.…
CVE-2018-15431HigOct 5, 2018
Cisco Systems, Inc.
Webex Network Recording Player
risk 0.47cvss 7.3epss 0.00
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates…
CVE-2018-15430HigOct 5, 2018
Cisco Systems, Inc.
Telepresence Video Communication Server
risk 0.47cvss 7.2epss 0.03
A vulnerability in the administrative web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with user-level privileges on the underlying operating system. The vulnerability…
CVE-2018-0440HigOct 5, 2018
Cisco Systems, Inc.
Data Center Network Manager
risk 0.47cvss 7.2epss 0.02
A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating system with root-level privileges. The vulnerability is due to incomplete input validation of user…
CVE-2018-0348HigJul 18, 2018
Cisco Systems, Inc.
Vbond Orchestrator
risk 0.47cvss 7.2epss 0.03
A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by…
CVE-2018-0344HigJul 18, 2018
Cisco Systems, Inc.
Vbond Orchestrator
risk 0.47cvss 7.2epss 0.02
A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due…
CVE-2018-0300HigJun 21, 2018
Cisco Systems, Inc.
Fxos
risk 0.47cvss 7.2epss 0.06
A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker using path traversal techniques to create or…
CVE-2018-0116HigFeb 8, 2018
Cisco Systems, Inc.
Policy Suite
risk 0.47cvss 7.2epss 0.02
A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized as a subscriber without providing a valid password; however, the attacker must provide a valid username. The vulnerability is due to…
CVE-2017-6746HigJul 25, 2017
Cisco Systems, Inc.
Web Security Appliance
risk 0.47cvss 7.2epss 0.04
A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco…
CVE-2017-3796HigJan 26, 2017
Cisco Systems, Inc.
Webex Meetings Server
risk 0.47cvss 7.2epss 0.02
A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined shell commands on other hosts. More Information: CSCuz03353. Known Affected Releases: 2.6.
CVE-2016-6373HigSep 22, 2016
Cisco Systems, Inc.
Cloud Services Platform 2100
risk 0.47cvss 7.2epss 0.02
The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541.
CVE-2012-0384HigMar 29, 2012
Cisco Systems, Inc.
Cisco iOS
risk 0.47cvss 7.2epss 0.04
Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to…
CVE-2025-20317HigAug 27, 2025
Cisco Systems, Inc.
Ucs Manager
risk 0.46cvss 7.1epss 0.00
A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification…
CVE-2025-20113HigMay 21, 2025
Cisco Systems, Inc.
Unified Intelligence Center
risk 0.46cvss 7.1epss 0.00
A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of user-supplied…
CVE-2025-20206HigMar 5, 2025
Cisco Systems, Inc.
Secure Client
risk 0.46cvss 7.1epss 0.00
A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco…
CVE-2024-20421HigOct 16, 2024
Cisco Systems, Inc.
Ata 191 Firmware
risk 0.46cvss 7.1epss 0.00
A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This…
CVE-2023-20253HigSep 27, 2023
Cisco Systems, Inc.
Catalyst SD-WAN Manager
risk 0.46cvss 7.1epss 0.00
A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and allow the attacker to roll back the configuration on vManage controllers and edge router device. This…
CVE-2023-20168HigAug 23, 2023
Cisco Systems, Inc.
NX-OS Software
risk 0.46cvss 7.1epss 0.00
A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device to unexpectedly reload. This vulnerability is due to incorrect input validation when processing an authentication…
CVE-2023-20229HigAug 16, 2023
Cisco Systems, Inc.
Duo Device Health Application
risk 0.46cvss 7.1epss 0.00
A vulnerability in the CryptoService function of Cisco Duo Device Health Application for Windows could allow an authenticated, local attacker with low privileges to conduct directory traversal attacks and overwrite arbitrary files on an affected system. This vulnerability is…
CVE-2022-20956HigNov 4, 2022
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.46cvss 7.1epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files. This vulnerability is due to improper access control in the web-based management…
CVE-2022-20822HigOct 26, 2022
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.46cvss 7.1epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read and delete files on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker…
CVE-2021-34788HigOct 6, 2021
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.46cvss 7.0epss 0.00
A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture (HostScan) Module is…
CVE-2021-1567HigJun 16, 2021
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.46cvss 7.0epss 0.00
A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture (HostScan) Module is installed on the AnyConnect client.…
CVE-2021-1496HigMay 6, 2021
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.46cvss 7.0epss 0.01
Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1430HigMay 6, 2021
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.46cvss 7.0epss 0.00
Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1429HigMay 6, 2021
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.46cvss 7.0epss 0.00
Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1428HigMay 6, 2021
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.46cvss 7.0epss 0.00
Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1427HigMay 6, 2021
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.46cvss 7.0epss 0.00
Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1426HigMay 6, 2021
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.46cvss 7.0epss 0.00
Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the…
CVE-2021-1365HigMay 6, 2021
Cisco Systems, Inc.
Unified Communications Manager Im And Presence Service
risk 0.46cvss 7.1epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper…
CVE-2021-1363HigMay 6, 2021
Cisco Systems, Inc.
Unified Communications Manager Im And Presence Service
risk 0.46cvss 7.1epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper…
CVE-2021-1386HigApr 8, 2021
Cisco Systems, Inc.
Clamav
risk 0.46cvss 7.0epss 0.00
A vulnerability in the dynamic link library (DLL) loading mechanism in Cisco Advanced Malware Protection (AMP) for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows…
CVE-2020-14418HigJan 30, 2021
Madshi
Madcodehook
risk 0.46cvss 7.0epss 0.00
A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.

Page 41 of 140