Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,059 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2022-20858	Cisco Systems, Inc. Nexus Dashboard	Cri	0.64	9.8	0.01		Jul 21, 2022	Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the…
CVE-2022-20857	Cisco Systems, Inc. Nexus Dashboard	Cri	0.64	9.8	0.02		Jul 21, 2022	Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the…
CVE-2022-20825	Cisco Systems, Inc. Rv215w	Cri	0.64	9.8	0.03		Jun 15, 2022	A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service…
CVE-2022-20798	Cisco Systems, Inc. Secure Email And Web Manager	Cri	0.64	9.8	0.01		Jun 15, 2022	A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass authentication and…
CVE-2021-40119	Cisco Systems, Inc. Policy Suite	Cri	0.64	9.8	0.03		Nov 4, 2021	A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installations. An attacker…
CVE-2021-37726	Arubanetworks Instant	Cri	0.64	9.8	0.02		Oct 12, 2021	A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.
CVE-2021-34727	Cisco Systems, Inc. IOS XE SD-WAN Software	Cri	0.64	9.8	0.03		Sep 23, 2021	A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes traffic. An…
CVE-2021-1619	Cisco Systems, Inc. iOS Xe	Cri	0.64	9.8	0.02		Sep 23, 2021	A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass NETCONF or RESTCONF authentication and do either of the following: Install, manipulate, or delete the…
CVE-2021-1610	Cisco Systems, Inc. RV340	Cri	0.64	9.8	0.09		Aug 4, 2021	Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute…
CVE-2021-1609	Cisco Systems, Inc. RV340	Cri	0.64	9.8	0.10		Aug 4, 2021	Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute…
CVE-2021-1508	Cisco Systems, Inc. SD-WAN vManage Software	Cri	0.64	9.8	0.02		May 6, 2021	Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the…
CVE-2021-1506	Cisco Systems, Inc. SD-WAN vManage Software	Cri	0.64	9.8	0.02		May 6, 2021	Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the…
CVE-2021-1505	Cisco Systems, Inc. SD-WAN vManage Software	Cri	0.64	9.8	0.02		May 6, 2021	Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the…
CVE-2021-1468	Cisco Systems, Inc. SD-WAN vManage Software	Cri	0.64	9.8	0.02		May 6, 2021	Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the…
CVE-2021-1275	Cisco Systems, Inc. SD-WAN vManage Software	Cri	0.64	9.8	0.02		May 6, 2021	Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the…
CVE-2021-1459	Cisco Systems, Inc. Small Business RV110W	Cri	0.64	9.8	0.03		Apr 8, 2021	A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of…
CVE-2021-1418	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Mar 24, 2021	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1417	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Mar 24, 2021	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1411	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Mar 24, 2021	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1471	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Mar 24, 2021	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1469	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Mar 24, 2021	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1396	Cisco Systems, Inc. Application Services Engine	Cri	0.64	9.8	0.01		Feb 24, 2021	Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more…
CVE-2021-1393	Cisco Systems, Inc. Application Services Engine	Cri	0.64	9.8	0.02		Feb 24, 2021	Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more…
CVE-2021-1361	Cisco Systems, Inc. NX-OS Software	Cri	0.64	9.8	0.02		Feb 24, 2021	A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create,…
CVE-2021-1295	Cisco Systems, Inc. RV160	Cri	0.64	9.8	0.04		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1294	Cisco Systems, Inc. RV160	Cri	0.64	9.8	0.05		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1293	Cisco Systems, Inc. Rv160w Wireless Ac VPN Router Firmware	Cri	0.64	9.8	0.05		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1292	Cisco Systems, Inc. RV160	Cri	0.64	9.8	0.04		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1291	Cisco Systems, Inc. Rv160w Wireless Ac VPN Router Firmware	Cri	0.64	9.8	0.04		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1290	Cisco Systems, Inc. RV160	Cri	0.64	9.8	0.04		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1289	Cisco Systems, Inc. RV160	Cri	0.64	9.8	0.04		Feb 4, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1142	Cisco Systems, Inc. Smart Software Manager Satellite	Cri	0.64	9.8	0.04		Jan 20, 2021	Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1141	Cisco Systems, Inc. Smart Software Manager Satellite	Cri	0.64	9.8	0.04		Jan 20, 2021	Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1140	Cisco Systems, Inc. Smart Software Manager Satellite	Cri	0.64	9.8	0.04		Jan 20, 2021	Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1139	Cisco Systems, Inc. Smart Software Manager Satellite	Cri	0.64	9.8	0.04		Jan 20, 2021	Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1138	Cisco Systems, Inc. Smart Software Manager Satellite	Cri	0.64	9.8	0.04		Jan 20, 2021	Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1301	Cisco Systems, Inc. SD-WAN	Cri	0.64	9.8	0.02		Jan 20, 2021	Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2021-1300	Cisco Systems, Inc. SD-WAN	Cri	0.64	9.8	0.02		Jan 20, 2021	Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2020-27134	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.02		Dec 11, 2020	Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27133	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Dec 11, 2020	Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27132	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Dec 11, 2020	Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27127	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01		Dec 11, 2020	Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-3531	Cisco Systems, Inc. IoT Field Network Director	Cri	0.64	9.8	0.02		Nov 18, 2020	A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls.…
CVE-2020-3470	Cisco Systems, Inc. Unified Computing System Integrated Management Controller	Cri	0.64	9.8	0.05		Nov 18, 2020	Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input.…
CVE-2020-27130	Cisco Systems, Inc. Security Manager	Cri	0.64	9.1	0.66		Nov 17, 2020	A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could…
CVE-2020-3284	Cisco Systems, Inc. iOS Xr	Cri	0.64	9.8	0.03		Nov 6, 2020	A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS…
CVE-2020-3580	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.64	6.1	0.86	KEV	Oct 21, 2020	Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web…
CVE-2019-16028	Cisco Systems, Inc. Firepower Management Center	Cri	0.64	9.8	0.03		Sep 23, 2020	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due…
CVE-2020-3446	Cisco Systems, Inc. Wide Area Application Services	Cri	0.64	9.8	0.01		Aug 26, 2020	A vulnerability in Cisco Virtual Wide Area Application Services (vWAAS) with Cisco Enterprise NFV Infrastructure Software (NFVIS)-bundled images for Cisco ENCS 5400-W Series and CSP 5000-W Series appliances could allow an unauthenticated, remote attacker to log into the NFVIS…
CVE-2020-3382	Cisco Systems, Inc. Data Center Network Manager	Cri	0.64	9.8	0.02		Jul 31, 2020	A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different…

CVE-2022-20858CriJul 21, 2022
Cisco Systems, Inc.
Nexus Dashboard
risk 0.64cvss 9.8epss 0.01
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the…
CVE-2022-20857CriJul 21, 2022
Cisco Systems, Inc.
Nexus Dashboard
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the…
CVE-2022-20825CriJun 15, 2022
Cisco Systems, Inc.
Rv215w
risk 0.64cvss 9.8epss 0.03
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service…
CVE-2022-20798CriJun 15, 2022
Cisco Systems, Inc.
Secure Email And Web Manager
risk 0.64cvss 9.8epss 0.01
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass authentication and…
CVE-2021-40119CriNov 4, 2021
Cisco Systems, Inc.
Policy Suite
risk 0.64cvss 9.8epss 0.03
A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installations. An attacker…
CVE-2021-37726CriOct 12, 2021
Arubanetworks
Instant
risk 0.64cvss 9.8epss 0.02
A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.
CVE-2021-34727CriSep 23, 2021
Cisco Systems, Inc.
IOS XE SD-WAN Software
risk 0.64cvss 9.8epss 0.03
A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes traffic. An…
CVE-2021-1619CriSep 23, 2021
Cisco Systems, Inc.
iOS Xe
risk 0.64cvss 9.8epss 0.02
A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass NETCONF or RESTCONF authentication and do either of the following: Install, manipulate, or delete the…
CVE-2021-1610CriAug 4, 2021
Cisco Systems, Inc.
RV340
risk 0.64cvss 9.8epss 0.09
Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute…
CVE-2021-1609CriAug 4, 2021
Cisco Systems, Inc.
RV340
risk 0.64cvss 9.8epss 0.10
Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute…
CVE-2021-1508CriMay 6, 2021
Cisco Systems, Inc.
SD-WAN vManage Software
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the…
CVE-2021-1506CriMay 6, 2021
Cisco Systems, Inc.
SD-WAN vManage Software
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the…
CVE-2021-1505CriMay 6, 2021
Cisco Systems, Inc.
SD-WAN vManage Software
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the…
CVE-2021-1468CriMay 6, 2021
Cisco Systems, Inc.
SD-WAN vManage Software
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the…
CVE-2021-1275CriMay 6, 2021
Cisco Systems, Inc.
SD-WAN vManage Software
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the…
CVE-2021-1459CriApr 8, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.64cvss 9.8epss 0.03
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of…
CVE-2021-1418CriMar 24, 2021
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1417CriMar 24, 2021
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1411CriMar 24, 2021
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1471CriMar 24, 2021
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1469CriMar 24, 2021
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1396CriFeb 24, 2021
Cisco Systems, Inc.
Application Services Engine
risk 0.64cvss 9.8epss 0.01
Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more…
CVE-2021-1393CriFeb 24, 2021
Cisco Systems, Inc.
Application Services Engine
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more…
CVE-2021-1361CriFeb 24, 2021
Cisco Systems, Inc.
NX-OS Software
risk 0.64cvss 9.8epss 0.02
A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create,…
CVE-2021-1295CriFeb 4, 2021
Cisco Systems, Inc.
RV160
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1294CriFeb 4, 2021
Cisco Systems, Inc.
RV160
risk 0.64cvss 9.8epss 0.05
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1293CriFeb 4, 2021
Cisco Systems, Inc.
Rv160w Wireless Ac VPN Router Firmware
risk 0.64cvss 9.8epss 0.05
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1292CriFeb 4, 2021
Cisco Systems, Inc.
RV160
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1291CriFeb 4, 2021
Cisco Systems, Inc.
Rv160w Wireless Ac VPN Router Firmware
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1290CriFeb 4, 2021
Cisco Systems, Inc.
RV160
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1289CriFeb 4, 2021
Cisco Systems, Inc.
RV160
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities…
CVE-2021-1142CriJan 20, 2021
Cisco Systems, Inc.
Smart Software Manager Satellite
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1141CriJan 20, 2021
Cisco Systems, Inc.
Smart Software Manager Satellite
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1140CriJan 20, 2021
Cisco Systems, Inc.
Smart Software Manager Satellite
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1139CriJan 20, 2021
Cisco Systems, Inc.
Smart Software Manager Satellite
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1138CriJan 20, 2021
Cisco Systems, Inc.
Smart Software Manager Satellite
risk 0.64cvss 9.8epss 0.04
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this…
CVE-2021-1301CriJan 20, 2021
Cisco Systems, Inc.
SD-WAN
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2021-1300CriJan 20, 2021
Cisco Systems, Inc.
SD-WAN
risk 0.64cvss 9.8epss 0.02
Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2020-27134CriDec 11, 2020
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.02
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27133CriDec 11, 2020
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27132CriDec 11, 2020
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-27127CriDec 11, 2020
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more…
CVE-2020-3531CriNov 18, 2020
Cisco Systems, Inc.
IoT Field Network Director
risk 0.64cvss 9.8epss 0.02
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls.…
CVE-2020-3470CriNov 18, 2020
Cisco Systems, Inc.
Unified Computing System Integrated Management Controller
risk 0.64cvss 9.8epss 0.05
Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input.…
CVE-2020-27130CriNov 17, 2020
Cisco Systems, Inc.
Security Manager
risk 0.64cvss 9.1epss 0.66
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to an affected device. An attacker could…
CVE-2020-3284CriNov 6, 2020
Cisco Systems, Inc.
iOS Xr
risk 0.64cvss 9.8epss 0.03
A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS…
CVE-2020-3580MedKEVOct 21, 2020
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.64cvss 6.1epss 0.86
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web…
CVE-2019-16028CriSep 23, 2020
Cisco Systems, Inc.
Firepower Management Center
risk 0.64cvss 9.8epss 0.03
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due…
CVE-2020-3446CriAug 26, 2020
Cisco Systems, Inc.
Wide Area Application Services
risk 0.64cvss 9.8epss 0.01
A vulnerability in Cisco Virtual Wide Area Application Services (vWAAS) with Cisco Enterprise NFV Infrastructure Software (NFVIS)-bundled images for Cisco ENCS 5400-W Series and CSP 5000-W Series appliances could allow an unauthenticated, remote attacker to log into the NFVIS…
CVE-2020-3382CriJul 31, 2020
Cisco Systems, Inc.
Data Center Network Manager
risk 0.64cvss 9.8epss 0.02
A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different…

Page 5 of 142