Browse high-severity CVEs

Linksys E4200 Firmware HIGH 7.5

CVE-2013-2680EPSS 9%

Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information.

No fix yet

Fix from $1,950 2020-02-05

Linksys E4200 Firmware HIGH 8.1

CVE-2013-2678EPSS 17%

Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive informat…

No fix yet

Fix from $1,950 2020-02-04

Sd Wan Firmware HIGH 8.8

CVE-2020-3115

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-l…

Mitigation only

Fix from $1,950 2020-01-26

Ios Xr HIGH 8.6

CVE-2019-16020

Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allo…

Mitigation only

Fix from $1,950 2020-01-26

Ios Xr HIGH 8.6

CVE-2019-16022

Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allo…

Mitigation only

Fix from $1,950 2020-01-26

Ios Xr MEDIUM 6.5

CVE-2019-16027

A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in C…

Mitigation only

Fix from $1,600 2020-01-26

Ios Xr MEDIUM 6.5

CVE-2019-16018

A vulnerability in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unau…

Mitigation only

Fix from $1,600 2020-01-26

Ios Xr HIGH 8.6

CVE-2019-15989

A vulnerability in the implementation of the Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, rem…

Mitigation only

Fix from $1,950 2020-01-26

Identity Services Engine MEDIUM 6.5

CVE-2019-15255

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass…

Mitigation only

Fix from $1,600 2020-01-26

Finesse MEDIUM 6.1

CVE-2019-15278

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and ac…

Mitigation only

Fix from $1,600 2020-01-26

Unified Personal Communicator HIGH 7.5

CVE-2010-3048

Cisco Unified Personal Communicator 7.0 (1.13056) does not free allocated memory for received data and does not perform validation if memory allocati…

Mitigation only

Fix from $1,950 2020-01-16

Ironport Web Security Appliance MEDIUM 5.9

CVE-2012-1316

Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks

Mitigation only

Fix from $1,600 2020-01-15

Linksys Ea2700 Firmware CRITICAL 9.8

CVE-2013-5122

Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access

No fix yet

Fix from $2,300 2020-01-07

Ios Xr MEDIUM 5.3

CVE-2019-15998

A vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software may allow connections despite an access c…

Mitigation only

Fix from $1,600 2019-11-26

Webex Meetings MEDIUM 5.3

CVE-2019-16001

A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Webex Teams for Windows could allow an authenticated, local atta…

Mitigation only

Fix from $1,600 2019-11-26

Unified Communications Manager HIGH 8.8

CVE-2019-15972

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduc…

Mitigation only

Fix from $1,950 2019-11-26

Hosted Collaboration Solution MEDIUM 5.4

CVE-2019-15968

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could allow an authenticated, remo…

Mitigation only

Fix from $1,600 2019-11-26

Webex Meetings Online MEDIUM 5.3

CVE-2019-15987

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Ce…

Mitigation only

Fix from $1,600 2019-11-26

Enterprise Chat And Email MEDIUM 6.5

CVE-2019-1877

A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through…

No fix yet

Fix from $1,600 2019-11-05

Firepower Services Software For Asa MEDIUM 5.3

CVE-2019-1982

A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Ci…

Mitigation only

Fix from $1,600 2019-11-05

Telepresence Advanced Media Gateway HIGH 7.7

CVE-2019-15966

A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote attacker to cause a denial o…

Mitigation only

Fix from $1,950 2019-11-05

Telepresence Video Communication Server HIGH 7.2

CVE-2011-2538

Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to exec…

Mitigation only

Fix from $1,950 2019-10-29

Aironet 1540 Firmware MEDIUM 6.5

CVE-2019-15264

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation of Cisco Aironet and Catalyst 9100 Access …

Mitigation only

Fix from $1,600 2019-10-16

Telepresence Video Communication Server MEDIUM 6.1

CVE-2019-12705

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow …

Mitigation only

Fix from $1,600 2019-10-16

Unified Communications Manager MEDIUM 6.5

CVE-2019-15272

A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Editio…

Mitigation only