Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-3450	Cisco Systems, Inc. Vision Dynamic Signage Director	Med	0.32	4.9	0.01	Jul 16, 2020	A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of…
CVE-2020-3242	Cisco Systems, Inc. Ucs Director	Med	0.32	4.9	0.01	Jun 18, 2020	A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with administrative privileges to obtain confidential information from an affected device. The vulnerability exists because confidential information is returned as part of an API…
CVE-2020-3223	Cisco Systems, Inc. iOS Xe	Med	0.32	4.9	0.02	Jun 3, 2020	A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope…
CVE-2020-3310	Cisco Systems, Inc. Firepower Device Manager On Box	Med	0.32	4.9	0.01	May 6, 2020	A vulnerability in the XML parser code of Cisco Firepower Device Manager On-Box software could allow an authenticated, remote attacker to cause an affected system to become unstable or reload. The vulnerability is due to insufficient hardening of the XML parser configuration. An…
CVE-2020-3308	Cisco Systems, Inc. Secure Firewall Management Center	Med	0.32	4.9	0.01	May 6, 2020	A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due…
CVE-2020-3256	Cisco Systems, Inc. Hosted Collaboration Mediation Fulfillment	Med	0.32	4.9	0.01	May 6, 2020	A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an…
CVE-2020-3154	Cisco Systems, Inc. Cloud Web Security	Med	0.32	4.9	0.01	Feb 19, 2020	A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web-based management interface improperly validates SQL values. An authenticated attacker could…
CVE-2019-15983	Cisco Systems, Inc. Data Center Network Manager	Med	0.32	4.9	0.01	Jan 6, 2020	A vulnerability in the SOAP API of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an attacker would need administrative privileges on…
CVE-2019-12710	Cisco Systems, Inc. Unified Communications Manager	Med	0.32	4.9	0.01	Oct 2, 2019	A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an authenticated, remote attacker to impact the confidentiality of an affected system by executing arbitrary…
CVE-2019-12693	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.32	4.9	0.01	Oct 2, 2019	A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to the use of an incorrect data type for a length variable.…
CVE-2019-12691	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.32	4.9	0.05	Oct 2, 2019	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient input validation by the…
CVE-2019-1961	Cisco Systems, Inc. Nfvis	Med	0.32	4.9	0.02	Aug 8, 2019	A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to the improper input validation of tar packages…
CVE-2019-1830	Cisco Systems, Inc. Wireless Lan Controller Software	Med	0.32	4.9	0.01	Apr 18, 2019	A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service (DoS) condition. The attacker would need to…
CVE-2019-1698	Cisco Systems, Inc. Internet of Things Field Network Director	Med	0.32	4.9	0.03	Feb 21, 2019	A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is due to improper…
CVE-2018-0462	Cisco Systems, Inc. Enterprise NFV Infrastructure Software (NFVIS)	Med	0.32	4.9	0.01	Oct 5, 2018	A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a denial of service (DoS) attack against an affected system. The vulnerability is due to insufficient validation…
CVE-2018-0196	Cisco Systems, Inc. iOS Xe	Med	0.32	4.9	0.01	Mar 28, 2018	A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbitrary files to the operating system of an affected device. The vulnerability is due to insufficient input validation of HTTP requests that…
CVE-2017-6777	Cisco Systems, Inc. Elastic Services Controller	Med	0.32	4.9	0.01	Aug 17, 2017	A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to acquire sensitive system information. The vulnerability is due to insufficient protection of sensitive files on the system. An attacker could…
CVE-2017-6690	Cisco Systems, Inc. Asr 5000 Series Software	Med	0.32	4.9	0.01	Jun 13, 2017	A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726.…
CVE-2017-6668	Cisco Systems, Inc. Unified Communications Domain Manager	Med	0.32	4.9	0.01	Jun 13, 2017	Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc52784 CSCvc97648.…
CVE-2017-3886	Cisco Systems, Inc. Unified Communications Manager	Med	0.32	4.9	0.02	Apr 7, 2017	A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user…
CVE-2026-20198	Cisco Systems, Inc. IMC	Med	0.31	4.8	0.00	Aug 5, 2026	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient…
CVE-2026-20199	Cisco Systems, Inc. Thousandeyes Virtual Appliance	Med	0.31	4.7	0.00	May 20, 2026	A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underlying operating system as the root user. This vulnerability is due to insufficient validation of user-supplied…
CVE-2026-20132	Cisco Systems, Inc. Identity Services Engine Software	Med	0.31	4.8	0.00	Apr 15, 2026	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative write privileges to conduct a stored cross-site scripting (XSS) attack or a reflected XSS attack against…
CVE-2026-20060	Cisco Systems, Inc. Unity Connection	Med	0.31	4.7	0.00	Apr 15, 2026	A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could…
CVE-2026-20090	Cisco Systems, Inc. IMC	Med	0.31	4.8	0.00	Apr 1, 2026	A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input.…
CVE-2026-20089	Cisco Systems, Inc. IMC	Med	0.31	4.8	0.00	Apr 1, 2026	A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input.…
CVE-2026-20088	Cisco Systems, Inc. IMC	Med	0.31	4.8	0.00	Apr 1, 2026	A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input.…
CVE-2026-20087	Cisco Systems, Inc. IMC	Med	0.31	4.8	0.00	Apr 1, 2026	A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input.…
CVE-2026-20112	Cisco Systems, Inc. Iox	Med	0.31	4.8	0.00	Mar 25, 2026	A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an…
CVE-2026-20091	Cisco Systems, Inc. FXOS Software	Med	0.31	4.8	0.00	Feb 25, 2026	A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to…
CVE-2026-20111	Cisco Systems, Inc. Prime Infrastructure	Med	0.31	4.8	0.00	Feb 4, 2026	A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an affected system. This vulnerability exists because the…
CVE-2026-20109	Cisco Systems, Inc. Unified Contact Center Enterprise	Med	0.31	4.8	0.00	Jan 21, 2026	Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
CVE-2026-20055	Cisco Systems, Inc. Unified Contact Center Enterprise	Med	0.31	4.8	0.00	Jan 21, 2026	Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
CVE-2026-20076	Cisco Systems, Inc. Identity Services Engine Software	Med	0.31	4.8	0.00	Jan 15, 2026	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient…
CVE-2026-20075	Cisco Systems, Inc. Prime Infrastructure	Med	0.31	4.8	0.00	Jan 15, 2026	A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an…
CVE-2026-20047	Cisco Systems, Inc. Cisco ISE Passive Identity Connector	Med	0.31	4.8	0.00	Jan 15, 2026	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This…
CVE-2025-20355	Cisco Systems, Inc. Catalyst Center Virtual Appliance	Med	0.31	4.7	0.00	Nov 13, 2025	A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An…
CVE-2025-20289	Cisco Systems, Inc. ISE	Med	0.31	4.8	0.00	Nov 5, 2025	Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of…
CVE-2025-20361	Cisco Systems, Inc. Unified Communications Manager	Med	0.31	4.8	0.00	Oct 1, 2025	A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)…
CVE-2025-20280	Cisco Systems, Inc. Prime Infrastructure	Med	0.31	4.8	0.00	Sep 3, 2025	A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an…
CVE-2025-20307	Cisco Systems, Inc. Broadworks Commpilot Application Software	Med	0.31	4.8	0.00	Jul 2, 2025	A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient…
CVE-2025-20279	Cisco Systems, Inc. Unified Ccx	Med	0.31	4.8	0.00	Jun 4, 2025	A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored XSS attack on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This…
CVE-2025-20267	Cisco Systems, Inc. Identity Services Engine Software	Med	0.31	4.8	0.00	May 21, 2025	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of…
CVE-2025-20223	Cisco Systems, Inc. Catalyst Center	Med	0.31	4.7	0.00	May 7, 2025	A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that belongs to an internal service of an affected device. This vulnerability is due to insufficient enforcement of…
CVE-2025-20216	Cisco Systems, Inc. Catalyst SD-WAN Manager	Med	0.31	4.7	0.00	May 7, 2025	A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the…
CVE-2025-20137	Cisco Systems, Inc. Cisco iOS	Med	0.31	4.7	0.00	May 7, 2025	A vulnerability in the access control list (ACL) programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco Catalyst 2960L Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the…
CVE-2025-20203	Cisco Systems, Inc. Prime Infrastructure	Med	0.31	4.8	0.00	Apr 2, 2025	A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an…
CVE-2025-20116	Cisco Systems, Inc. APIC	Med	0.31	4.8	0.00	Feb 26, 2025	A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform a stored XSS attack on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper input…
CVE-2025-20205	Cisco Systems, Inc. Identity Services Engine Software	Med	0.31	4.8	0.00	Feb 5, 2025	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to…
CVE-2025-20204	Cisco Systems, Inc. ISE	Med	0.31	4.8	0.00	Feb 5, 2025	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to…

CVE-2020-3450MedJul 16, 2020
Cisco Systems, Inc.
Vision Dynamic Signage Director
risk 0.32cvss 4.9epss 0.01
A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of…
CVE-2020-3242MedJun 18, 2020
Cisco Systems, Inc.
Ucs Director
risk 0.32cvss 4.9epss 0.01
A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with administrative privileges to obtain confidential information from an affected device. The vulnerability exists because confidential information is returned as part of an API…
CVE-2020-3223MedJun 3, 2020
Cisco Systems, Inc.
iOS Xe
risk 0.32cvss 4.9epss 0.02
A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope…
CVE-2020-3310MedMay 6, 2020
Cisco Systems, Inc.
Firepower Device Manager On Box
risk 0.32cvss 4.9epss 0.01
A vulnerability in the XML parser code of Cisco Firepower Device Manager On-Box software could allow an authenticated, remote attacker to cause an affected system to become unstable or reload. The vulnerability is due to insufficient hardening of the XML parser configuration. An…
CVE-2020-3308MedMay 6, 2020
Cisco Systems, Inc.
Secure Firewall Management Center
risk 0.32cvss 4.9epss 0.01
A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due…
CVE-2020-3256MedMay 6, 2020
Cisco Systems, Inc.
Hosted Collaboration Mediation Fulfillment
risk 0.32cvss 4.9epss 0.01
A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an…
CVE-2020-3154MedFeb 19, 2020
Cisco Systems, Inc.
Cloud Web Security
risk 0.32cvss 4.9epss 0.01
A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web-based management interface improperly validates SQL values. An authenticated attacker could…
CVE-2019-15983MedJan 6, 2020
Cisco Systems, Inc.
Data Center Network Manager
risk 0.32cvss 4.9epss 0.01
A vulnerability in the SOAP API of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an attacker would need administrative privileges on…
CVE-2019-12710MedOct 2, 2019
Cisco Systems, Inc.
Unified Communications Manager
risk 0.32cvss 4.9epss 0.01
A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an authenticated, remote attacker to impact the confidentiality of an affected system by executing arbitrary…
CVE-2019-12693MedOct 2, 2019
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.32cvss 4.9epss 0.01
A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to the use of an incorrect data type for a length variable.…
CVE-2019-12691MedOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.32cvss 4.9epss 0.05
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient input validation by the…
CVE-2019-1961MedAug 8, 2019
Cisco Systems, Inc.
Nfvis
risk 0.32cvss 4.9epss 0.02
A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to the improper input validation of tar packages…
CVE-2019-1830MedApr 18, 2019
Cisco Systems, Inc.
Wireless Lan Controller Software
risk 0.32cvss 4.9epss 0.01
A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service (DoS) condition. The attacker would need to…
CVE-2019-1698MedFeb 21, 2019
Cisco Systems, Inc.
Internet of Things Field Network Director
risk 0.32cvss 4.9epss 0.03
A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is due to improper…
CVE-2018-0462MedOct 5, 2018
Cisco Systems, Inc.
Enterprise NFV Infrastructure Software (NFVIS)
risk 0.32cvss 4.9epss 0.01
A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a denial of service (DoS) attack against an affected system. The vulnerability is due to insufficient validation…
CVE-2018-0196MedMar 28, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.32cvss 4.9epss 0.01
A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbitrary files to the operating system of an affected device. The vulnerability is due to insufficient input validation of HTTP requests that…
CVE-2017-6777MedAug 17, 2017
Cisco Systems, Inc.
Elastic Services Controller
risk 0.32cvss 4.9epss 0.01
A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to acquire sensitive system information. The vulnerability is due to insufficient protection of sensitive files on the system. An attacker could…
CVE-2017-6690MedJun 13, 2017
Cisco Systems, Inc.
Asr 5000 Series Software
risk 0.32cvss 4.9epss 0.01
A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726.…
CVE-2017-6668MedJun 13, 2017
Cisco Systems, Inc.
Unified Communications Domain Manager
risk 0.32cvss 4.9epss 0.01
Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc52784 CSCvc97648.…
CVE-2017-3886MedApr 7, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.32cvss 4.9epss 0.02
A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user…
CVE-2026-20198MedAug 5, 2026
Cisco Systems, Inc.
IMC
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient…
CVE-2026-20199MedMay 20, 2026
Cisco Systems, Inc.
Thousandeyes Virtual Appliance
risk 0.31cvss 4.7epss 0.00
A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underlying operating system as the root user. This vulnerability is due to insufficient validation of user-supplied…
CVE-2026-20132MedApr 15, 2026
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative write privileges to conduct a stored cross-site scripting (XSS) attack or a reflected XSS attack against…
CVE-2026-20060MedApr 15, 2026
Cisco Systems, Inc.
Unity Connection
risk 0.31cvss 4.7epss 0.00
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could…
CVE-2026-20090MedApr 1, 2026
Cisco Systems, Inc.
IMC
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input.…
CVE-2026-20089MedApr 1, 2026
Cisco Systems, Inc.
IMC
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input.…
CVE-2026-20088MedApr 1, 2026
Cisco Systems, Inc.
IMC
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input.…
CVE-2026-20087MedApr 1, 2026
Cisco Systems, Inc.
IMC
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input.…
CVE-2026-20112MedMar 25, 2026
Cisco Systems, Inc.
Iox
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an…
CVE-2026-20091MedFeb 25, 2026
Cisco Systems, Inc.
FXOS Software
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to…
CVE-2026-20111MedFeb 4, 2026
Cisco Systems, Inc.
Prime Infrastructure
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an affected system. This vulnerability exists because the…
CVE-2026-20109MedJan 21, 2026
Cisco Systems, Inc.
Unified Contact Center Enterprise
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
CVE-2026-20055MedJan 21, 2026
Cisco Systems, Inc.
Unified Contact Center Enterprise
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
CVE-2026-20076MedJan 15, 2026
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient…
CVE-2026-20075MedJan 15, 2026
Cisco Systems, Inc.
Prime Infrastructure
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an…
CVE-2026-20047MedJan 15, 2026
Cisco Systems, Inc.
Cisco ISE Passive Identity Connector
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This…
CVE-2025-20355MedNov 13, 2025
Cisco Systems, Inc.
Catalyst Center Virtual Appliance
risk 0.31cvss 4.7epss 0.00
A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An…
CVE-2025-20289MedNov 5, 2025
Cisco Systems, Inc.
ISE
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of…
CVE-2025-20361MedOct 1, 2025
Cisco Systems, Inc.
Unified Communications Manager
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)…
CVE-2025-20280MedSep 3, 2025
Cisco Systems, Inc.
Prime Infrastructure
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an…
CVE-2025-20307MedJul 2, 2025
Cisco Systems, Inc.
Broadworks Commpilot Application Software
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient…
CVE-2025-20279MedJun 4, 2025
Cisco Systems, Inc.
Unified Ccx
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored XSS attack on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This…
CVE-2025-20267MedMay 21, 2025
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of…
CVE-2025-20223MedMay 7, 2025
Cisco Systems, Inc.
Catalyst Center
risk 0.31cvss 4.7epss 0.00
A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that belongs to an internal service of an affected device. This vulnerability is due to insufficient enforcement of…
CVE-2025-20216MedMay 7, 2025
Cisco Systems, Inc.
Catalyst SD-WAN Manager
risk 0.31cvss 4.7epss 0.00
A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the…
CVE-2025-20137MedMay 7, 2025
Cisco Systems, Inc.
Cisco iOS
risk 0.31cvss 4.7epss 0.00
A vulnerability in the access control list (ACL) programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco Catalyst 2960L Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the…
CVE-2025-20203MedApr 2, 2025
Cisco Systems, Inc.
Prime Infrastructure
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an…
CVE-2025-20116MedFeb 26, 2025
Cisco Systems, Inc.
APIC
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform a stored XSS attack on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper input…
CVE-2025-20205MedFeb 5, 2025
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to…
CVE-2025-20204MedFeb 5, 2025
Cisco Systems, Inc.
ISE
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to…

Page 80 of 140