Browse CVEs

CRITICAL 9.8 CVE-2018-0271 A vulnerability in the API gateway of the Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass a… Digital Network Architecture Center 1.1.2+ Fix from $2,3002018-05-17 CRITICAL 9.8 CVE-2018-0253EPSS 6% A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute ar… Secure Access Control System 5.8+ Fix from $2,3002018-05-02 CRITICAL 9.8 CVE-2018-0258EPSS 6% A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to a… Prime Data Center Network Manager Mitigation only Fix from $2,3002018-05-02 CRITICAL 9.6 CVE-2018-0264 A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker… Webex Business Suite 31 3.0+ Fix from $2,3002018-05-02 CRITICAL 9.9 CVE-2018-0238 A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System (UCS) Director could allow an authenticated, … Unified Computing System Director Mitigation only Fix from $2,3002018-04-19 CRITICAL 9.0 CVE-2018-0112 A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote att… Webex Meetings Server Mitigation only Fix from $2,3002018-04-19 CRITICAL 9.8 CVE-2018-0171 KEVEPSS 99% A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigg… iOS Mitigation only Fix from $2,3002018-03-28 CRITICAL 9.8 CVE-2018-0150 A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running an affected release of Cisco I… Ios Xe Mitigation only Fix from $2,3002018-03-28 CRITICAL 9.8 CVE-2018-0151 KEVEPSS 14% A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote atta… Ios Xe Mitigation only Fix from $2,3002018-03-28 CRITICAL 9.8 CVE-2018-0147 KEVEPSS 18% A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated,… Secure Access Control System Mitigation only Fix from $2,3002018-03-08 CRITICAL 9.8 CVE-2018-0121 A vulnerability in the authentication functionality of the web-based service portal of Cisco Elastic Services Controller Software could allow an unau… Elastic Services Controller Mitigation only Fix from $2,3002018-02-22 CRITICAL 9.8 CVE-2018-0124 A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain e… Unified Communications Domain Manager 11.5+ Fix from $2,3002018-02-22 CRITICAL 9.8 CVE-2018-0130 A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenti… Virtual Managed Services Mitigation only Fix from $2,3002018-02-22 CRITICAL 9.8 CVE-2018-0125 KEVEPSS 55% A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticate… Rv132w Firmware Mitigation only Fix from $2,3002018-02-08 CRITICAL 9.8 CVE-2018-0127EPSS 77% A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unau… Rv132w Firmware Mitigation only Fix from $2,3002018-02-08 CRITICAL 10.0 CVE-2018-0101EPSS 73% A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenti… Adaptive Security Appliance Software 9.1.7.23 / 9.2.4.27+ Fix from $2,3002018-01-29 CRITICAL 9.6 CVE-2018-0104 A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary … Webex Business Suite Mitigation only Fix from $2,3002018-01-04 CRITICAL 9.6 CVE-2017-12367 A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format… Webex Meetings Server Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.6 CVE-2017-12368 A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Fo… Webex Meetings Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.6 CVE-2017-12369 A "Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (AR… Webex Meetings Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.6 CVE-2017-12370 A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Fo… Webex Meetings Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.6 CVE-2017-12371 A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Fo… Webex Meetings Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.6 CVE-2017-12372 A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Fo… Webex Meetings Server Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.8 CVE-2017-12337EPSS 7% A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an u… Emergency Responder Mitigation only Fix from $2,3002017-11-16 CRITICAL 9.9 CVE-2017-12251 A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciou… Cloud Services Platform 2100 Mitigation only Fix from $2,3002017-10-19 CRITICAL 9.8 CVE-2017-12240 KEVEPSS 14% The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remot… iOS after 15.6 Fix from $2,3002017-09-29 CRITICAL 9.8 CVE-2017-12229 A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, remote atta… Ios Xe Mitigation only Fix from $2,3002017-09-29 CRITICAL 9.8 CVE-2017-12236 A vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, r… Ios Xe Mitigation only Fix from $2,3002017-09-29 CRITICAL 9.1 CVE-2017-12249 A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker… Meeting Server after 2.0.15 Fix from $2,3002017-09-13 CRITICAL 9.8 CVE-2017-6747 A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass local … Identity Services Engine Mitigation only Fix from $2,3002017-08-07