Browse CVEs

CRITICAL 9.8 CVE-2018-15379EPSS 81% A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticate… Prime Infrastructure No fix yet Fix from $2,3002018-10-05 CRITICAL 9.8 CVE-2018-15386 A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and have … Digital Network Architecture Center Mitigation only Fix from $2,3002018-10-05 CRITICAL 9.8 CVE-2018-15387 A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. … Sd Wan 17.2.8+ Fix from $2,3002018-10-05 CRITICAL 9.8 CVE-2018-15389 A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the… Prime Collaboration Mitigation only Fix from $2,3002018-10-05 CRITICAL 9.8 CVE-2018-0448 A vulnerability in the identity management service of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker… Digital Network Architecture Center 1.1.4+ Fix from $2,3002018-10-05 CRITICAL 9.8 CVE-2018-0425 A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, … Rv110w Firmware 1.0.3.44+ Fix from $2,3002018-10-05 CRITICAL 9.8 CVE-2018-0426 A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, … Rv110w Firmware 1.0.3.44+ Fix from $2,3002018-10-05 CRITICAL 9.1 CVE-2018-0435 A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other o… Umbrella Mitigation only Fix from $2,3002018-10-05 CRITICAL 9.8 CVE-2018-0398 Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-s… Finesse Mitigation only Fix from $2,3002018-07-18 CRITICAL 9.8 CVE-2018-0399 Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a clearte… Finesse Mitigation only Fix from $2,3002018-07-18 CRITICAL 9.8 CVE-2018-0403 Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, … Unified Contact Center Express Mitigation only Fix from $2,3002018-07-18 CRITICAL 9.8 CVE-2018-0349 A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating s… Vbond Orchestrator 18.3.0+ Fix from $2,3002018-07-18 CRITICAL 9.8 CVE-2018-0374 A vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to connect directl… Mobility Services Engine Mitigation only Fix from $2,3002018-07-18 CRITICAL 9.8 CVE-2018-0375 A vulnerability in the Cluster Manager of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to log in to an affected s… Mobility Services Engine 18.2.0+ Fix from $2,3002018-07-18 CRITICAL 9.8 CVE-2018-0376 A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Pol… Mobility Services Engine 18.2.0+ Fix from $2,3002018-07-18 CRITICAL 9.8 CVE-2018-0377 A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before 18.1.0 could allow an unauthenticated, remote at… Mobility Services Engine 18.1.0+ Fix from $2,3002018-07-18 CRITICAL 9.8 CVE-2018-0310 A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacke… Nx Os 1.1.4.179 / 2.0.1.153+ Fix from $2,3002018-06-21 CRITICAL 9.8 CVE-2018-0301EPSS 14% A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management int… Nx Os 7.0 / 7.3+ Fix from $2,3002018-06-20 CRITICAL 9.8 CVE-2018-0304EPSS 8% A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacke… Nexus 7000 Firmware Mitigation only Fix from $2,3002018-06-20 CRITICAL 9.8 CVE-2018-0308 A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacke… Nexus 7000 Firmware Mitigation only Fix from $2,3002018-06-20 CRITICAL 9.8 CVE-2018-0312 A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacke… Nexus 7000 Firmware Mitigation only Fix from $2,3002018-06-20 CRITICAL 9.8 CVE-2018-0314EPSS 5% A vulnerability in the Cisco Fabric Services (CFS) component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote a… Nexus 7000 Firmware Mitigation only Fix from $2,3002018-06-20 CRITICAL 9.8 CVE-2018-0225 The Enterprise Console in Cisco AppDynamics App iQ Platform before 4.4.3.10598 (HF4) allows SQL injection, aka the Security Advisory 2089 issue. Appdynamics App Iq after 4.4.3 Fix from $2,3002018-06-08 CRITICAL 9.8 CVE-2018-0315EPSS 8% A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unauthenticated,… Ios Xe Mitigation only Fix from $2,3002018-06-07 CRITICAL 9.8 CVE-2018-0318 A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gai… Prime Collaboration after 12.1 Fix from $2,3002018-06-07 CRITICAL 9.8 CVE-2018-0319 A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to … Prime Collaboration after 12.1 Fix from $2,3002018-06-07 CRITICAL 9.8 CVE-2018-0320 A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to execute … Prime Collaboration after 12.1 Fix from $2,3002018-06-07 CRITICAL 9.8 CVE-2018-0321 A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invo… Prime Collaboration after 11.6 Fix from $2,3002018-06-07 CRITICAL 10.0 CVE-2018-0222 A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by… Digital Network Architecture Center 1.1.3+ Fix from $2,3002018-05-17 CRITICAL 10.0 CVE-2018-0268 A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attac… Digital Network Architecture Center after 1.1.3 Fix from $2,3002018-05-17