Browse CVEs

MEDIUM 6.1 CVE-2026-20233 A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-sit… Webex Meetings Mitigation only Fix from $1,6002026-06-03 MEDIUM 6.1 CVE-2026-20059 A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflecte… Unity Connection after 12.5 Fix from $1,6002026-04-15 MEDIUM 5.4 CVE-2026-20108 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cro… Catalyst Sd Wan Manager 20.12.5.3 / 20.15.4.2+ Fix from $1,6002026-03-25 MEDIUM 6.1 CVE-2026-20117 A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote at… Unified Contact Center Express after 15.0 Fix from $1,6002026-03-11 MEDIUM 6.1 CVE-2026-20149 A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addre… Webex Mitigation only Fix from $1,6002026-03-04 MEDIUM 6.1 CVE-2026-20102 A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Sof… Adaptive Security Appliance Software 7.0.9 / 7.2.11+ Fix from $1,6002026-03-04 MEDIUM 6.1 CVE-2025-20353 A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-sit… Catalyst Center 2.3.7.10+ Fix from $1,6002025-11-13 MEDIUM 5.4 CVE-2025-20303 Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduc… Identity Services Engine after 3.1.0 Fix from $1,6002025-11-05 MEDIUM 5.4 CVE-2025-20304 Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduc… Identity Services Engine after 3.1.0 Fix from $1,6002025-11-05 MEDIUM 5.4 CVE-2025-20289 Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduc… Identity Services Engine after 3.1.0 Fix from $1,6002025-11-05 MEDIUM 6.1 CVE-2025-20351 A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Soft… Desk Phone 9871 Firmware 14.3+ Fix from $1,6002025-10-15 MEDIUM 5.4 CVE-2025-20357 A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-sit… Cyber Vision Center Mitigation only Fix from $1,6002025-10-01 MEDIUM 5.4 CVE-2025-20356 A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-sit… Cyber Vision Center after 5.2.0 Fix from $1,6002025-10-01 MEDIUM 6.1 CVE-2025-20330 A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could a… Unified Communications Manager Im And Presence Service 15su3+ Fix from $1,6002025-09-03 MEDIUM 5.4 CVE-2025-20328 A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileges to con… Webex Meetings Mitigation only Fix from $1,6002025-09-03 MEDIUM 6.1 CVE-2025-20235 A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remot… Secure Firewall Management Center Mitigation only Fix from $1,6002025-08-14 MEDIUM 6.1 CVE-2025-20310 A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site… Enterprise Chat And Email 12.6+ Fix from $1,6002025-07-02 MEDIUM 6.1 CVE-2025-20273 A vulnerability in the web-based management interface of Cisco Unified Intelligent Contact Management Enterprise could allow an unauthenticated, remo… Unified Intelligent Contact Management Enterprise after 15.0 Fix from $1,6002025-06-04 MEDIUM 6.1 CVE-2025-20246 A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is … Webex Meetings Mitigation only Fix from $1,6002025-05-21 MEDIUM 6.1 CVE-2025-20247 A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is … Webex Meetings Mitigation only Fix from $1,6002025-05-21 MEDIUM 6.1 CVE-2025-20250 A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is … Webex Meetings Mitigation only Fix from $1,6002025-05-21 MEDIUM 5.4 CVE-2025-20147 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, … Catalyst Sd Wan Manager Mitigation only Fix from $1,6002025-05-07 MEDIUM 6.1 CVE-2025-20120 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow… Prime Infrastructure Mitigation only Fix from $1,6002025-04-02 MEDIUM 5.4 CVE-2025-20208 A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attacker to c… Telepresence Management Suite Mitigation only Fix from $1,6002025-03-05 MEDIUM 5.4 CVE-2020-3420 A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager S… Unified Communications Manager Mitigation only Fix from $1,6002024-11-18 MEDIUM 6.1 CVE-2022-20632 A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack agai… Enterprise Chat And Email 12.6+ Fix from $1,6002024-11-15 MEDIUM 6.1 CVE-2023-20060 A vulnerability in the web-based management interface of Cisco Prime Collaboration Deployment could allow an unauthenticated, remote attacker to cond… Prime Collaboration Deployment 14su3+ Fix from $1,6002024-11-15 MEDIUM 6.1 CVE-2022-20657 A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an unauthenticated, remote attacker to conduct… Prime Infrastructure Mitigation only Fix from $1,6002024-11-15 MEDIUM 6.1 CVE-2022-20663 A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could allow an unauth… Secure Network Analytics 7.2.1+ Fix from $1,6002024-11-15 MEDIUM 6.1 CVE-2022-20631 A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack agai… Enterprise Chat And Email 12.6+ Fix from $1,6002024-11-15