Browse CVEs

HIGH 8.8 CVE-2024-20284 A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python s… Nx Os Mitigation only Fix from $1,9502024-08-28 MEDIUM 6.1 CVE-2024-20488 A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager S… Unified Communications Manager Mitigation only Fix from $1,6002024-08-21 HIGH 7.5 CVE-2024-20375 A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Ses… Unified Communications Manager Mitigation only Fix from $1,9502024-08-21 CRITICAL 9.8 CVE-2024-20450EPSS 7% Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series… Spa 301 Firmware Mitigation only Fix from $2,3002024-08-07 CRITICAL 9.8 CVE-2024-20454EPSS 7% Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series… Spa 301 Firmware Mitigation only Fix from $2,3002024-08-07 HIGH 7.5 CVE-2024-20451 Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series… Spa 301 Firmware Mitigation only Fix from $1,9502024-08-07 MEDIUM 5.4 CVE-2024-20443 A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a u… Identity Services Engine No fix yet Fix from $1,6002024-08-07 HIGH 7.8 CVE-2024-20435 A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and e… Asyncos Mitigation only Fix from $1,9502024-07-17 HIGH 7.2 CVE-2024-20429 A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to exec… Asyncos Mitigation only Fix from $1,9502024-07-17 MEDIUM 6.5 CVE-2024-20396 A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain access to sensitive information. … Webex Teams Mitigation only Fix from $1,6002024-07-17 HIGH 7.3 CVE-2024-20395 A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive… Webex Teams Mitigation only Fix from $1,9502024-07-17 MEDIUM 6.7 CVE-2024-20456 A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Se… Ios Xr Mitigation only Fix from $1,6002024-07-10 MEDIUM 6.7 CVE-2024-20399 KEV A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary … Nx Os Mitigation only Fix from $1,6002024-07-01 HIGH 8.8 CVE-2024-20360 A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attack… Secure Firewall Management Center Mitigation only Fix from $1,9502024-05-22 MEDIUM 5.8 CVE-2024-20361 A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unaut… Secure Firewall Management Center Mitigation only Fix from $1,6002024-05-22 MEDIUM 5.0 CVE-2024-20355 A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Soft… Adaptive Security Appliance Software Mitigation only Fix from $1,6002024-05-22 MEDIUM 5.8 CVE-2024-20261 A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense (FTD) Software could all… Secure Firewall Threat Defense Mitigation only Fix from $1,6002024-05-22 HIGH 7.8 CVE-2024-20389 A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attac… Crosswork Network Services Orchestrator Mitigation only Fix from $1,9502024-05-16 MEDIUM 6.1 CVE-2024-20392 A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attac… Asyncos No fix yet Fix from $1,6002024-05-15 HIGH 7.4 CVE-2024-20313 A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affecte… Ios Xe Mitigation only Fix from $1,9502024-04-24 MEDIUM 6.7 CVE-2024-20358 A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Thre… Adaptive Security Appliance Software Mitigation only Fix from $1,6002024-04-24 HIGH 8.6 CVE-2024-20353 KEVEPSS 71% A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) S… Adaptive Security Appliance Software Mitigation only Fix from $1,9502024-04-24 MEDIUM 6.0 CVE-2024-20359 KEVEPSS 19% A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Secu… Adaptive Security Appliance Software Mitigation only Fix from $1,6002024-04-24 HIGH 7.5 CVE-2024-20348 A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated… Nexus Dashboard Fabric Controller Mitigation only Fix from $1,9502024-04-03 MEDIUM 6.1 CVE-2024-20362 A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an un… Rv016 Firmware Mitigation only Fix from $1,6002024-04-03 MEDIUM 6.1 CVE-2024-20310 A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthentic… Unified Communications Manager Im And Presence Service Mitigation only Fix from $1,6002024-04-03 MEDIUM 5.5 CVE-2024-20332 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduc… Identity Services Engine Mitigation only Fix from $1,6002024-04-03 HIGH 7.5 CVE-2024-20307 A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to ca… iOS Mitigation only Fix from $1,9502024-03-27 HIGH 7.5 CVE-2024-20308 A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to ca… iOS Mitigation only Fix from $1,9502024-03-27 MEDIUM 5.5 CVE-2024-20324 A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details… Ios Xe Mitigation only Fix from $1,6002024-03-27