Vulnerability index

Browse CVEs

455 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Webex Meetings MEDIUM 6.1
CVE-2026-20233

A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-sit…

Mitigation only
Fix from $1,600 2026-06-03
Unity Connection MEDIUM 6.1
CVE-2026-20059

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflecte…

Fix: after 12.5
Fix from $1,600 2026-04-15
Catalyst Sd Wan Manager MEDIUM 5.4
CVE-2026-20108

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cro…

Fix: 20.12.5.3 / 20.15.4.2+
Fix from $1,600 2026-03-25
Unified Contact Center Express MEDIUM 6.1
CVE-2026-20117

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote at…

Fix: after 15.0
Fix from $1,600 2026-03-11
Webex MEDIUM 6.1
CVE-2026-20149

A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addre…

Mitigation only
Fix from $1,600 2026-03-04
Adaptive Security Appliance Software MEDIUM 6.1
CVE-2026-20102

A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Sof…

Fix: 7.0.9 / 7.2.11+
Fix from $1,600 2026-03-04
Catalyst Center MEDIUM 6.1
CVE-2025-20353

A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-sit…

Fix: 2.3.7.10+
Fix from $1,600 2025-11-13
Identity Services Engine MEDIUM 5.4
CVE-2025-20303

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduc…

Fix: after 3.1.0
Fix from $1,600 2025-11-05
Identity Services Engine MEDIUM 5.4
CVE-2025-20304

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduc…

Fix: after 3.1.0
Fix from $1,600 2025-11-05
Identity Services Engine MEDIUM 5.4
CVE-2025-20289

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduc…

Fix: after 3.1.0
Fix from $1,600 2025-11-05
Desk Phone 9871 Firmware MEDIUM 6.1
CVE-2025-20351

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Soft…

Fix: 14.3+
Fix from $1,600 2025-10-15
Cyber Vision Center MEDIUM 5.4
CVE-2025-20357

A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-sit…

Mitigation only
Fix from $1,600 2025-10-01
Cyber Vision Center MEDIUM 5.4
CVE-2025-20356

A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-sit…

Fix: after 5.2.0
Fix from $1,600 2025-10-01
Unified Communications Manager Im And Presence Service MEDIUM 6.1
CVE-2025-20330

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could a…

Fix: 15su3+
Fix from $1,600 2025-09-03
Webex Meetings MEDIUM 5.4
CVE-2025-20328

A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileges to con…

Mitigation only
Fix from $1,600 2025-09-03
Secure Firewall Management Center MEDIUM 6.1
CVE-2025-20235

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remot…

Mitigation only
Fix from $1,600 2025-08-14
Enterprise Chat And Email MEDIUM 6.1
CVE-2025-20310

A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site…

Fix: 12.6+
Fix from $1,600 2025-07-02
Unified Intelligent Contact Management Enterprise MEDIUM 6.1
CVE-2025-20273

A vulnerability in the web-based management interface of Cisco Unified Intelligent Contact Management Enterprise could allow an unauthenticated, remo…

Fix: after 15.0
Fix from $1,600 2025-06-04
Webex Meetings MEDIUM 6.1
CVE-2025-20246

A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is …

Mitigation only
Fix from $1,600 2025-05-21
Webex Meetings MEDIUM 6.1
CVE-2025-20247

A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is …

Mitigation only
Fix from $1,600 2025-05-21
Webex Meetings MEDIUM 6.1
CVE-2025-20250

A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is …

Mitigation only
Fix from $1,600 2025-05-21
Catalyst Sd Wan Manager MEDIUM 5.4
CVE-2025-20147

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, …

Mitigation only
Fix from $1,600 2025-05-07
Prime Infrastructure MEDIUM 6.1
CVE-2025-20120

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow…

Mitigation only
Fix from $1,600 2025-04-02
Telepresence Management Suite MEDIUM 5.4
CVE-2025-20208

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attacker to c…

Mitigation only
Fix from $1,600 2025-03-05
Unified Communications Manager MEDIUM 5.4
CVE-2020-3420

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager S…

Mitigation only
Fix from $1,600 2024-11-18
Enterprise Chat And Email MEDIUM 6.1
CVE-2022-20632

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack agai…

Fix: 12.6+
Fix from $1,600 2024-11-15
Prime Collaboration Deployment MEDIUM 6.1
CVE-2023-20060

A vulnerability in the web-based management interface of Cisco Prime Collaboration Deployment could allow an unauthenticated, remote attacker to cond…

Fix: 14su3+
Fix from $1,600 2024-11-15
Prime Infrastructure MEDIUM 6.1
CVE-2022-20657

A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an unauthenticated, remote attacker to conduct…

Mitigation only
Fix from $1,600 2024-11-15
Secure Network Analytics MEDIUM 6.1
CVE-2022-20663

A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could allow an unauth…

Fix: 7.2.1+
Fix from $1,600 2024-11-15
Enterprise Chat And Email MEDIUM 6.1
CVE-2022-20631

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack agai…

Fix: 12.6+
Fix from $1,600 2024-11-15