Browse CVEs

MEDIUM 6.5 CVE-2017-12274 A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points … Aironet 1562 Firmware Mitigation only Fix from $1,6002017-11-02 MEDIUM 6.3 CVE-2017-12278 A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote att… Wireless Lan Controller Software Mitigation only Fix from $1,6002017-11-02 MEDIUM 6.1 CVE-2017-12282 A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an u… Wireless Lan Controller Software Mitigation only Fix from $1,6002017-11-02 MEDIUM 6.1 CVE-2017-12283 A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an unauthenticate… Aironet 3800 Firmware Mitigation only Fix from $1,6002017-11-02 MEDIUM 5.4 CVE-2017-12294 A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Webex Meetings Server Mitigation only Fix from $1,6002017-11-02 MEDIUM 5.3 CVE-2017-12295 A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An att… Webex Meetings Server Mitigation only Fix from $1,6002017-11-02 HIGH 7.5 CVE-2017-15805 Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage… Small Business Sa520 Firmware Mitigation only Fix from $1,9502017-10-23 MEDIUM 6.7 CVE-2017-12317 The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software… Advanced Malware Protection Mitigation only Fix from $1,6002017-10-22 CRITICAL 9.9 CVE-2017-12251 A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciou… Cloud Services Platform 2100 Mitigation only Fix from $2,3002017-10-19 HIGH 8.6 CVE-2017-12293 A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vuln… Webex Meetings Server Mitigation only Fix from $1,9502017-10-19 MEDIUM 6.7 CVE-2017-12301 A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser an… Nx Os Mitigation only Fix from $1,6002017-10-19 MEDIUM 6.1 CVE-2017-12272 A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting … Ios Xe Mitigation only Fix from $1,6002017-10-19 MEDIUM 6.1 CVE-2017-12288 A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to cond… Finesse Mitigation only Fix from $1,6002017-10-19 MEDIUM 6.1 CVE-2017-12296 A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against… Webex Meetings Server Mitigation only Fix from $1,6002017-10-19 MEDIUM 6.1 CVE-2017-12298 A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against … Webex Meeting Center Mitigation only Fix from $1,6002017-10-19 MEDIUM 5.5 CVE-2017-12284 A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile informa… Jabber Mitigation only Fix from $1,6002017-10-19 MEDIUM 5.5 CVE-2017-12286 A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affec… Jabber Mitigation only Fix from $1,6002017-10-19 MEDIUM 5.3 CVE-2017-12285EPSS 37% A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary fi… Prime Network Analysis Module Mitigation only Fix from $1,6002017-10-19 HIGH 8.6 CVE-2017-12244 A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker t… Secure Firewall Management Center Mitigation only Fix from $1,9502017-10-05 HIGH 8.6 CVE-2017-12245 A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause … Secure Firewall Management Center Mitigation only Fix from $1,9502017-10-05 HIGH 8.6 CVE-2017-12246EPSS 7% A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow an unauthe… Adaptive Security Appliance Software Mitigation only Fix from $1,9502017-10-05 HIGH 7.5 CVE-2017-12263EPSS 11% A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files wit… License Manager Mitigation only Fix from $1,9502017-10-05 HIGH 7.5 CVE-2017-12270 A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unauthenticat… Ios Xr Mitigation only Fix from $1,9502017-10-05 MEDIUM 6.5 CVE-2017-12256 A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attack… Wide Area Application Services Mitigation only Fix from $1,6002017-10-05 MEDIUM 6.5 CVE-2017-12268 A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to enable… Anyconnect Secure Mobility Client Mitigation only Fix from $1,6002017-10-05 MEDIUM 6.1 CVE-2017-12257 A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Webex Meetings Server Mitigation only Fix from $1,6002017-10-05 MEDIUM 6.1 CVE-2017-12258 A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame … Unified Communications Manager Mitigation only Fix from $1,6002017-10-05 MEDIUM 6.1 CVE-2017-12265 A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote atta… Adaptive Security Appliance Mitigation only Fix from $1,6002017-10-05 MEDIUM 5.4 CVE-2017-12269 A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-site scriptin… Spark Mitigation only Fix from $1,6002017-10-05 MEDIUM 5.3 CVE-2017-12264 A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Meeting Server Mitigation only Fix from $1,6002017-10-05