Browse CVEs

CRITICAL 10.0 CVE-2026-20223 A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to acces… Secure Workload 3.10.8.3 / 4.0.3.17+ Fix from $2,3002026-05-20 HIGH 8.2 CVE-2026-5944 An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passth… Intersight Device Connector after 7.5.0 Fix from $1,9502026-04-28 CRITICAL 9.8 CVE-2025-20358 A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass… Unified Contact Center Express 12.5+ Fix from $2,3002025-11-05 HIGH 7.3 CVE-2025-20210 A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read an… Catalyst Center 2.3.7.9+ Fix from $1,9502025-05-07 CRITICAL 10.0 CVE-2025-32433 KEVEPSS 99% Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server ma… Confd Basic 5.7.19.1 / 6.1.16.2+ Fix from $2,3002025-04-16 MEDIUM 6.8 CVE-2024-20391 A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an … Secure Client 5.1.3.62+ Fix from $1,6002024-05-15 HIGH 8.8 CVE-2023-20003 A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenti… Business 140ac Access Point Firmware 10.8.1.0+ Fix from $1,9502023-05-18 CRITICAL 9.8 CVE-2023-20126EPSS 37% A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execut… Spa112 Firmware Mitigation only Fix from $2,3002023-05-04 MEDIUM 5.3 CVE-2022-20830 A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an una… Catalyst Sd Wan Manager 20.3.4.1 / 20.6.1+ Fix from $1,6002022-10-10 CRITICAL 9.8 CVE-2022-20857 Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload conta… Nexus Dashboard 2.2+ Fix from $2,3002022-07-21 CRITICAL 9.8 CVE-2022-20858 Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload conta… Nexus Dashboard 2.2+ Fix from $2,3002022-07-21 HIGH 8.8 CVE-2022-20861 Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload conta… Nexus Dashboard 2.2+ Fix from $1,9502022-07-21 MEDIUM 5.3 CVE-2021-1499EPSS 80% A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload f… Hyperflex Hx Data Platform 4.0 / 4.5+ Fix from $1,6002021-05-06 CRITICAL 9.8 CVE-2021-1393 Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level… Application Services Engine 1.1+ Fix from $2,3002021-02-24 MEDIUM 6.5 CVE-2021-1396 Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level… Application Services Engine 1.1+ Fix from $1,6002021-02-24 MEDIUM 6.1 CVE-2021-1246 Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerabilit… Finesse 12.0+ Fix from $1,6002021-01-13 CRITICAL 9.8 CVE-2020-3531 A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end data… Iot Field Network Director 4.6.1+ Fix from $2,3002020-11-18 HIGH 7.5 CVE-2020-3392 A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive information on… Iot Field Network Director 4.6.1+ Fix from $1,9502020-11-18 MEDIUM 6.5 CVE-2020-3598 A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to acc… Vision Dynamic Signage Director 6.2.0+ Fix from $1,6002020-10-08 MEDIUM 6.5 CVE-2019-16004 A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentic… Vision Dynamic Signage Director 6.2.0+ Fix from $1,6002020-09-23 MEDIUM 5.8 CVE-2020-3448 A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, remote attacker to bypass authen… Cyber Vision Center 3.0.4+ Fix from $1,6002020-08-17 MEDIUM 5.3 CVE-2020-3461 A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to … Data Center Network Manager 11.4+ Fix from $1,6002020-07-31 CRITICAL 9.8 CVE-2020-3376 A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypa… Data Center Network Manager Mitigation only Fix from $2,3002020-07-31 HIGH 7.5 CVE-2020-3402 A vulnerability in the Java Remote Method Invocation (RMI) interface of Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, rem… Unified Customer Voice Portal after 12.5 Fix from $1,9502020-07-02 MEDIUM 5.5 CVE-2020-3335 A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive informa… Application Policy Infrastructure Controller 1.1.2.20+ Fix from $1,6002020-06-03 MEDIUM 5.3 CVE-2020-3333 A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on … Application Policy Infrastructure Controller 1.1.2.20+ Fix from $1,6002020-06-03 HIGH 7.5 CVE-2020-3142 A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote attendee to join a p… Webex Meetings Online 39.11.5 / 40.1.3+ Fix from $1,9502020-01-26 MEDIUM 5.3 CVE-2019-16003 A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log fi… Ucs Director 6.7.3.1+ Fix from $1,6002020-01-26 MEDIUM 5.3 CVE-2019-15282 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacke… Identity Services Engine Software 2.4+ Fix from $1,6002019-10-16 HIGH 7.5 CVE-2019-12634 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS D… Integrated Management Controller Supervisor after 6.7.2.0 Fix from $1,9502019-08-21