Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-1758	Cisco Systems, Inc. Cisco iOS	Med	0.31	4.7	0.01	Mar 28, 2019	A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An…
CVE-2019-1665	Cisco Systems, Inc. Hyperflex Hx Data Platform	Med	0.31	4.7	0.01	Feb 21, 2019	A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due…
CVE-2019-1658	Cisco Systems, Inc. Unified Intelligence Center	Med	0.31	4.7	0.01	Jan 24, 2019	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to…
CVE-2018-15393	Cisco Systems, Inc. Content Security Management Appliance	Med	0.31	4.8	0.01	Nov 8, 2018	A vulnerability in the web-based management interface of Cisco Content Security Management Appliance (SMA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The…
CVE-2018-0388	Cisco Systems, Inc. Wireless Lan Controller Software	Med	0.31	4.8	0.01	Oct 17, 2018	A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web-based interface of an affected system. The vulnerability is due to…
CVE-2018-15426	Cisco Systems, Inc. Unity Connection	Med	0.31	4.8	0.01	Oct 5, 2018	A vulnerability in the web-based interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient…
CVE-2018-15425	Cisco Systems, Inc. Identity Services Engine Software	Med	0.31	4.7	0.02	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server.
CVE-2018-15424	Cisco Systems, Inc. Identity Services Engine Software	Med	0.31	4.7	0.01	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server.
CVE-2018-15423	Cisco Systems, Inc. HyperFlex Software	Med	0.31	4.7	0.01	Oct 5, 2018	A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests that are sent to an…
CVE-2018-0334	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Med	0.31	4.8	0.01	Jun 7, 2018	A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility Client for iOS, Mac OS X, Android, Windows, and Linux could allow an unauthenticated, remote attacker to bypass the TLS certificate check…
CVE-2018-0149	Cisco Systems, Inc. Integrated Management Controller Supervisor	Med	0.31	4.8	0.01	Jun 7, 2018	A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow an authenticated, remote attacker to conduct a Document Object Model-based (DOM-based), stored cross-site scripting…
CVE-2017-16007	Cisco Systems, Inc. node-jose	Med	0.31	5.9	0.01	Jun 4, 2018	node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key…
CVE-2018-0247	Cisco Systems, Inc. Wireless Lan Controller Software	Med	0.31	4.7	0.01	May 2, 2018	A vulnerability in Web Authentication (WebAuth) clients for the Cisco Wireless LAN Controller (WLC) and Aironet Access Points running Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass authentication and pass traffic. The vulnerability is due to…
CVE-2018-0119	Cisco Systems, Inc. Spark	Med	0.31	4.7	0.01	Feb 8, 2018	A vulnerability in certain authentication controls in the account services of Cisco Spark could allow an authenticated, remote attacker to interact with and view information on an affected device that would normally be prohibited. The vulnerability is due to the improper display…
CVE-2017-12345	Cisco Systems, Inc. Data Center Network Manager	Med	0.31	4.7	0.01	Nov 30, 2017	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-3803	Cisco Systems, Inc. Cisco iOS	Med	0.31	4.7	0.01	Jan 26, 2017	A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue that would eventually lead to a partial denial of service (DoS) condition. More…
CVE-2025-20199	Cisco Systems, Inc. iOS Xe	Med	0.30	4.6	0.00	May 7, 2025	A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when…
CVE-2025-20198	Cisco Systems, Inc. iOS Xe	Med	0.30	4.6	0.00	May 7, 2025	A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when…
CVE-2025-20208	Cisco Systems, Inc. Telepresence Management Suite	Med	0.30	4.6	0.00	Mar 5, 2025	A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient input…
CVE-2020-3538	Cisco Systems, Inc. Data Center Network Manager	Med	0.30	4.6	0.01	Nov 18, 2024	A vulnerability in a certain REST API endpoint of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to perform a path traversal attack on an affected device. The vulnerability is due to insufficient path restriction…
CVE-2023-20097	Cisco Systems, Inc. Wireless Lan Controller Software	Med	0.30	4.6	0.00	Mar 23, 2023	A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to…
CVE-2023-20064	Cisco Systems, Inc. iOS Xr	Med	0.30	4.6	0.00	Mar 9, 2023	A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to view sensitive files on the console using the GRUB bootloader command line. This vulnerability is due to the inclusion…
CVE-2022-20864	Cisco Systems, Inc. Ios Xe Rom Monitor	Med	0.30	4.6	0.00	Oct 10, 2022	A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This vulnerability is due to a problem…
CVE-2022-20731	Cisco Systems, Inc. Catalyst Digital Building Series Switches	Med	0.30	4.6	0.00	Apr 15, 2022	Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service…
CVE-2022-20661	Cisco Systems, Inc. Catalyst Digital Building Series Switches	Med	0.30	4.6	0.00	Apr 15, 2022	Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service…
CVE-2022-20660	Cisco Systems, Inc. IP Phone	Med	0.30	4.6	0.00	Jan 14, 2022	A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device. This vulnerability is due to unencrypted storage of confidential information on…
CVE-2021-1135	Cisco Systems, Inc. Data Center Network Manager	Med	0.30	4.6	0.01	Jan 20, 2021	Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of…
CVE-2021-1255	Cisco Systems, Inc. Data Center Network Manager	Med	0.30	4.6	0.01	Jan 20, 2021	Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of…
CVE-2021-1133	Cisco Systems, Inc. Data Center Network Manager	Med	0.30	4.6	0.01	Jan 20, 2021	Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of…
CVE-2019-1632	Cisco Systems, Inc. Cisco Integrated Management Controller (IMC)	Med	0.30	4.6	0.01	Jun 20, 2019	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due…
CVE-2019-1589	Cisco Systems, Inc. Nexus 9000 Series Fabric Switches	Med	0.30	4.6	0.00	May 3, 2019	A vulnerability in the Trusted Platform Module (TPM) functionality of software for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, local attacker with physical access to view sensitive information on an…
CVE-2019-1586	Cisco Systems, Inc. Application Policy Infrastructure Controller	Med	0.30	4.6	0.00	May 3, 2019	A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure removal of cleartext encryption…
CVE-2019-1677	Cisco Systems, Inc. Webex Meetings	Med	0.30	4.6	0.00	Feb 7, 2019	A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit…
CVE-2018-0483	Cisco Systems, Inc. Jabber	Med	0.30	4.6	0.01	Jan 10, 2019	A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected…
CVE-2026-20037	Cisco Systems, Inc. UCS Manager Software	Med	0.29	4.4	0.00	Feb 25, 2026	A vulnerability in the NX-OS CLI privilege levels of Cisco UCS Manager Software could allow an authenticated, local attacker with read-only privileges to modify files and perform unauthorized actions on an affected system. This vulnerability exists because unnecessary…
CVE-2025-20292	Cisco Systems, Inc. NX-OS Software	Med	0.29	4.4	0.03	Aug 27, 2025	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the…
CVE-2025-20118	Cisco Systems, Inc. APIC	Med	0.29	4.4	0.00	Feb 26, 2025	A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. …
CVE-2025-20158	Cisco Systems, Inc. Desk Phone 9800 Series	Med	0.29	4.4	0.00	Feb 19, 2025	A vulnerability in the debug shell of Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative…
CVE-2023-20093	Cisco Systems, Inc. RoomOS	Med	0.29	4.4	0.00	Nov 15, 2024	Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the…
CVE-2023-20092	Cisco Systems, Inc. RoomOS	Med	0.29	4.4	0.00	Nov 15, 2024	Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the…
CVE-2023-20004	Cisco Systems, Inc. RoomOS	Med	0.29	4.4	0.00	Nov 15, 2024	Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the…
CVE-2024-20289	Cisco Systems, Inc. NX-OS Software	Med	0.29	4.4	0.00	Aug 28, 2024	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments for…
CVE-2024-20292	Cisco Systems, Inc. Duo Authentication For Windows Logon And RDP	Med	0.29	4.4	0.00	Mar 6, 2024	A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted…
CVE-2023-20234	Cisco Systems, Inc. FXOS Software	Med	0.29	4.4	0.00	Aug 23, 2023	A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. The vulnerability occurs because there is no validation of parameters when a…
CVE-2023-20216	Cisco Systems, Inc. BroadWorks	Med	0.29	4.4	0.00	Aug 3, 2023	A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. This vulnerability is due to incorrect implementation of user role permissions. An…
CVE-2023-20098	Cisco Systems, Inc. Catalyst SD-WAN Manager	Med	0.29	4.4	0.01	May 9, 2023	A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vulnerability is due to improper filtering of directory traversal character sequences within system commands. An attacker with…
CVE-2023-20029	Cisco Systems, Inc. iOS Xe	Med	0.29	4.4	0.00	Mar 23, 2023	A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected…
CVE-2023-20050	Cisco Systems, Inc. NX-OS Software	Med	0.29	4.4	0.00	Feb 23, 2023	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific…
CVE-2023-20008	Cisco Systems, Inc. RoomOS	Med	0.29	4.4	0.00	Jan 20, 2023	A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are in the local…
CVE-2023-20002	Cisco Systems, Inc. RoomOS	Med	0.29	4.4	0.00	Jan 20, 2023	A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker…

CVE-2019-1758MedMar 28, 2019
Cisco Systems, Inc.
Cisco iOS
risk 0.31cvss 4.7epss 0.01
A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An…
CVE-2019-1665MedFeb 21, 2019
Cisco Systems, Inc.
Hyperflex Hx Data Platform
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due…
CVE-2019-1658MedJan 24, 2019
Cisco Systems, Inc.
Unified Intelligence Center
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to…
CVE-2018-15393MedNov 8, 2018
Cisco Systems, Inc.
Content Security Management Appliance
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based management interface of Cisco Content Security Management Appliance (SMA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The…
CVE-2018-0388MedOct 17, 2018
Cisco Systems, Inc.
Wireless Lan Controller Software
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web-based interface of an affected system. The vulnerability is due to…
CVE-2018-15426MedOct 5, 2018
Cisco Systems, Inc.
Unity Connection
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient…
CVE-2018-15425MedOct 5, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.31cvss 4.7epss 0.02
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server.
CVE-2018-15424MedOct 5, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server.
CVE-2018-15423MedOct 5, 2018
Cisco Systems, Inc.
HyperFlex Software
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests that are sent to an…
CVE-2018-0334MedJun 7, 2018
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.31cvss 4.8epss 0.01
A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility Client for iOS, Mac OS X, Android, Windows, and Linux could allow an unauthenticated, remote attacker to bypass the TLS certificate check…
CVE-2018-0149MedJun 7, 2018
Cisco Systems, Inc.
Integrated Management Controller Supervisor
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow an authenticated, remote attacker to conduct a Document Object Model-based (DOM-based), stored cross-site scripting…
CVE-2017-16007MedJun 4, 2018
Cisco Systems, Inc.
node-jose
risk 0.31cvss 5.9epss 0.01
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key…
CVE-2018-0247MedMay 2, 2018
Cisco Systems, Inc.
Wireless Lan Controller Software
risk 0.31cvss 4.7epss 0.01
A vulnerability in Web Authentication (WebAuth) clients for the Cisco Wireless LAN Controller (WLC) and Aironet Access Points running Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass authentication and pass traffic. The vulnerability is due to…
CVE-2018-0119MedFeb 8, 2018
Cisco Systems, Inc.
Spark
risk 0.31cvss 4.7epss 0.01
A vulnerability in certain authentication controls in the account services of Cisco Spark could allow an authenticated, remote attacker to interact with and view information on an affected device that would normally be prohibited. The vulnerability is due to the improper display…
CVE-2017-12345MedNov 30, 2017
Cisco Systems, Inc.
Data Center Network Manager
risk 0.31cvss 4.7epss 0.01
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-3803MedJan 26, 2017
Cisco Systems, Inc.
Cisco iOS
risk 0.31cvss 4.7epss 0.01
A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue that would eventually lead to a partial denial of service (DoS) condition. More…
CVE-2025-20199MedMay 7, 2025
Cisco Systems, Inc.
iOS Xe
risk 0.30cvss 4.6epss 0.00
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when…
CVE-2025-20198MedMay 7, 2025
Cisco Systems, Inc.
iOS Xe
risk 0.30cvss 4.6epss 0.00
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when…
CVE-2025-20208MedMar 5, 2025
Cisco Systems, Inc.
Telepresence Management Suite
risk 0.30cvss 4.6epss 0.00
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient input…
CVE-2020-3538MedNov 18, 2024
Cisco Systems, Inc.
Data Center Network Manager
risk 0.30cvss 4.6epss 0.01
A vulnerability in a certain REST API endpoint of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to perform a path traversal attack on an affected device. The vulnerability is due to insufficient path restriction…
CVE-2023-20097MedMar 23, 2023
Cisco Systems, Inc.
Wireless Lan Controller Software
risk 0.30cvss 4.6epss 0.00
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to…
CVE-2023-20064MedMar 9, 2023
Cisco Systems, Inc.
iOS Xr
risk 0.30cvss 4.6epss 0.00
A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to view sensitive files on the console using the GRUB bootloader command line. This vulnerability is due to the inclusion…
CVE-2022-20864MedOct 10, 2022
Cisco Systems, Inc.
Ios Xe Rom Monitor
risk 0.30cvss 4.6epss 0.00
A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This vulnerability is due to a problem…
CVE-2022-20731MedApr 15, 2022
Cisco Systems, Inc.
Catalyst Digital Building Series Switches
risk 0.30cvss 4.6epss 0.00
Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service…
CVE-2022-20661MedApr 15, 2022
Cisco Systems, Inc.
Catalyst Digital Building Series Switches
risk 0.30cvss 4.6epss 0.00
Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service…
CVE-2022-20660MedJan 14, 2022
Cisco Systems, Inc.
IP Phone
risk 0.30cvss 4.6epss 0.00
A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device. This vulnerability is due to unencrypted storage of confidential information on…
CVE-2021-1135MedJan 20, 2021
Cisco Systems, Inc.
Data Center Network Manager
risk 0.30cvss 4.6epss 0.01
Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of…
CVE-2021-1255MedJan 20, 2021
Cisco Systems, Inc.
Data Center Network Manager
risk 0.30cvss 4.6epss 0.01
Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of…
CVE-2021-1133MedJan 20, 2021
Cisco Systems, Inc.
Data Center Network Manager
risk 0.30cvss 4.6epss 0.01
Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of…
CVE-2019-1632MedJun 20, 2019
Cisco Systems, Inc.
Cisco Integrated Management Controller (IMC)
risk 0.30cvss 4.6epss 0.01
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due…
CVE-2019-1589MedMay 3, 2019
Cisco Systems, Inc.
Nexus 9000 Series Fabric Switches
risk 0.30cvss 4.6epss 0.00
A vulnerability in the Trusted Platform Module (TPM) functionality of software for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, local attacker with physical access to view sensitive information on an…
CVE-2019-1586MedMay 3, 2019
Cisco Systems, Inc.
Application Policy Infrastructure Controller
risk 0.30cvss 4.6epss 0.00
A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure removal of cleartext encryption…
CVE-2019-1677MedFeb 7, 2019
Cisco Systems, Inc.
Webex Meetings
risk 0.30cvss 4.6epss 0.00
A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit…
CVE-2018-0483MedJan 10, 2019
Cisco Systems, Inc.
Jabber
risk 0.30cvss 4.6epss 0.01
A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected…
CVE-2026-20037MedFeb 25, 2026
Cisco Systems, Inc.
UCS Manager Software
risk 0.29cvss 4.4epss 0.00
A vulnerability in the NX-OS CLI privilege levels of Cisco UCS Manager Software could allow an authenticated, local attacker with read-only privileges to modify files and perform unauthorized actions on an affected system. This vulnerability exists because unnecessary…
CVE-2025-20292MedAug 27, 2025
Cisco Systems, Inc.
NX-OS Software
risk 0.29cvss 4.4epss 0.03
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the…
CVE-2025-20118MedFeb 26, 2025
Cisco Systems, Inc.
APIC
risk 0.29cvss 4.4epss 0.00
A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. …
CVE-2025-20158MedFeb 19, 2025
Cisco Systems, Inc.
Desk Phone 9800 Series
risk 0.29cvss 4.4epss 0.00
A vulnerability in the debug shell of Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative…
CVE-2023-20093MedNov 15, 2024
Cisco Systems, Inc.
RoomOS
risk 0.29cvss 4.4epss 0.00
Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the…
CVE-2023-20092MedNov 15, 2024
Cisco Systems, Inc.
RoomOS
risk 0.29cvss 4.4epss 0.00
Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the…
CVE-2023-20004MedNov 15, 2024
Cisco Systems, Inc.
RoomOS
risk 0.29cvss 4.4epss 0.00
Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the…
CVE-2024-20289MedAug 28, 2024
Cisco Systems, Inc.
NX-OS Software
risk 0.29cvss 4.4epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments for…
CVE-2024-20292MedMar 6, 2024
Cisco Systems, Inc.
Duo Authentication For Windows Logon And RDP
risk 0.29cvss 4.4epss 0.00
A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted…
CVE-2023-20234MedAug 23, 2023
Cisco Systems, Inc.
FXOS Software
risk 0.29cvss 4.4epss 0.00
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. The vulnerability occurs because there is no validation of parameters when a…
CVE-2023-20216MedAug 3, 2023
Cisco Systems, Inc.
BroadWorks
risk 0.29cvss 4.4epss 0.00
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. This vulnerability is due to incorrect implementation of user role permissions. An…
CVE-2023-20098MedMay 9, 2023
Cisco Systems, Inc.
Catalyst SD-WAN Manager
risk 0.29cvss 4.4epss 0.01
A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vulnerability is due to improper filtering of directory traversal character sequences within system commands. An attacker with…
CVE-2023-20029MedMar 23, 2023
Cisco Systems, Inc.
iOS Xe
risk 0.29cvss 4.4epss 0.00
A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected…
CVE-2023-20050MedFeb 23, 2023
Cisco Systems, Inc.
NX-OS Software
risk 0.29cvss 4.4epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific…
CVE-2023-20008MedJan 20, 2023
Cisco Systems, Inc.
RoomOS
risk 0.29cvss 4.4epss 0.00
A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are in the local…
CVE-2023-20002MedJan 20, 2023
Cisco Systems, Inc.
RoomOS
risk 0.29cvss 4.4epss 0.00
A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker…

Page 85 of 140