Vulnerability index

Browse CVEs

21 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Unrestricted File UploadCWE-434 × clear
Meeting Management HIGH 8.8
CVE-2026-20098

A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary f…

Fix: 3.12.1+
Fix from $1,950 2026-02-04
Unified Contact Center Express HIGH 7.2
CVE-2025-20375

A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulne…

Fix: 12.5+
Fix from $1,950 2025-11-05
Unified Contact Center Express HIGH 7.2
CVE-2025-20376

A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulne…

Fix: 12.5+
Fix from $1,950 2025-11-05
Unified Contact Center Express CRITICAL 9.8
CVE-2025-20354

A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arb…

Fix: 12.5+
Fix from $2,300 2025-11-05
Evolved Programmable Network Manager HIGH 8.8
CVE-2025-20287

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attac…

Fix: after 8.0.0
Fix from $1,950 2025-09-03
Unified Intelligence Center HIGH 8.8
CVE-2025-20274

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload ar…

Mitigation only
Fix from $1,950 2025-07-16
Identity Services Engine HIGH 7.2
CVE-2025-20130

A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, r…

Fix: 3.1.0+
Fix from $1,950 2025-06-04
Identity Services Engine HIGH 7.2
CVE-2024-20296

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload…

Fix: 3.1+
Fix from $1,950 2024-07-17
Unity Connection CRITICAL 9.8
CVE-2024-20272

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary f…

Fix: 12.5.1.19017-4 / 14.0.1.14006-5+
Fix from $2,300 2024-01-17
Identity Services Engine HIGH 7.2
CVE-2023-20196

Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vuln…

Mitigation only
Fix from $1,950 2023-11-01
Identity Services Engine HIGH 7.2
CVE-2023-20195

Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vuln…

Mitigation only
Fix from $1,950 2023-11-01
Webex Meetings MEDIUM 6.5
CVE-2023-20134

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site sc…

Mitigation only
Fix from $1,600 2023-04-05
Rv340 Firmware CRITICAL 9.8
CVE-2023-20073EPSS 89%

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthent…

Fix: after 1.0.03.29
Fix from $2,300 2023-04-05
Email Security Appliance HIGH 7.2
CVE-2023-20009

A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow…

Fix: 12.5.3-041 / 12.8.1-021+
Fix from $1,950 2023-03-01
Network Services Orchestrator MEDIUM 5.5
CVE-2023-20040

A vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to cause a denial o…

Fix: 5.4.7 / 5.5.6+
Fix from $1,600 2023-01-20
Secure Firewall Management Center HIGH 8.8
CVE-2022-20743

A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to …

Fix: 6.4.0.15 / 6.6.5.2+
Fix from $1,950 2022-05-03
Adaptive Security Appliance HIGH 8.6
CVE-2020-3436

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allo…

Fix: 6.3.0.6 / 6.4.0.10+
Fix from $1,950 2020-10-21
Unified Contact Center Express HIGH 7.2
CVE-2019-1888

A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attack…

Mitigation only
Fix from $1,950 2020-09-23
Industrial Network Director HIGH 7.2
CVE-2019-1861

A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrar…

Fix: 1.6.0+
Fix from $1,950 2019-06-05
Prime Data Center Network Manager CRITICAL 9.8
CVE-2018-0258EPSS 49%

A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to a…

Mitigation only
Fix from $2,300 2018-05-02
Unified Meetingplace HIGH 9.0
CVE-2015-0702

Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated…

Mitigation only
Fix from $1,950 2015-04-21