Browse CVEs

MEDIUM 6.1 CVE-2018-0199 A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Jabber Mitigation only Fix from $1,6002018-02-22 MEDIUM 6.1 CVE-2018-0200 A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a reflected cros… Prime Service Catalog No fix yet Fix from $1,6002018-02-22 MEDIUM 6.1 CVE-2018-0205 A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to co… Prime Collaboration Provisioning Mitigation only Fix from $1,6002018-02-22 MEDIUM 6.1 CVE-2018-0206 A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cond… Unified Communications Manager Mitigation only Fix from $1,6002018-02-22 MEDIUM 5.4 CVE-2018-0146 A vulnerability in the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a cross-site requ… Data Center Analytics Framework Mitigation only Fix from $1,6002018-02-22 MEDIUM 5.4 CVE-2018-0201 A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack a… Jabber Mitigation only Fix from $1,6002018-02-22 MEDIUM 5.3 CVE-2018-0203 A vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated, remote attacker to send unsolicited email messages, aka a… Unity Connection Mitigation only Fix from $1,6002018-02-22 MEDIUM 6.5 CVE-2018-0140 A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated… Email Security Appliance Firmware Mitigation only Fix from $1,6002018-02-08 CRITICAL 9.8 CVE-2018-0125 KEVEPSS 55% A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticate… Rv132w Firmware Mitigation only Fix from $2,3002018-02-08 CRITICAL 9.8 CVE-2018-0127EPSS 77% A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unau… Rv132w Firmware Mitigation only Fix from $2,3002018-02-08 HIGH 8.8 CVE-2018-0113 A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with t… Unified Computing System Central Software Mitigation only Fix from $1,9502018-02-08 HIGH 8.6 CVE-2018-0117 A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software could allo… Asr 5000 Firmware Mitigation only Fix from $1,9502018-02-08 HIGH 8.6 CVE-2018-0132 A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause incon… Carrier Routing System Mitigation only Fix from $1,9502018-02-08 HIGH 8.6 CVE-2018-0137 A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to cause a denial of service (Do… Prime Network Mitigation only Fix from $1,9502018-02-08 HIGH 7.2 CVE-2018-0116 A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized as a subsc… Mobility Services Engine Mitigation only Fix from $1,9502018-02-08 MEDIUM 6.1 CVE-2018-0128 A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to con… Data Center Analytics Framework Mitigation only Fix from $1,6002018-02-08 MEDIUM 6.1 CVE-2018-0129 A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to con… Data Center Analytics Framework Mitigation only Fix from $1,6002018-02-08 MEDIUM 5.5 CVE-2018-0123 A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use certain … iOS Mitigation only Fix from $1,6002018-02-08 MEDIUM 5.3 CVE-2018-0134 A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to determine whether a subs… Mobility Services Engine Mitigation only Fix from $1,6002018-02-08 MEDIUM 5.3 CVE-2018-0138 A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies th… Secure Firewall Threat Defense Mitigation only Fix from $1,6002018-02-08 HIGH 8.6 CVE-2018-0136 A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9000 Series could allow … Ios Xr Patch available Fix from $1,9502018-01-31 CRITICAL 10.0 CVE-2018-0101EPSS 87% A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenti… Adaptive Security Appliance Software 9.1.7.23 / 9.2.4.27+ Fix from $2,3002018-01-29 HIGH 8.8 CVE-2018-0099 A vulnerability in the web management GUI of the Cisco D9800 Network Transport Receiver could allow an authenticated, remote attacker to perform a co… D9800 Firmware No fix yet Fix from $1,9502018-01-18 HIGH 8.8 CVE-2018-0107 A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unwanted actions on an… Prime Service Catalog Mitigation only Fix from $1,9502018-01-18 HIGH 8.1 CVE-2018-0110 A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access the remote support account even after it has b… Webex Meetings Server Mitigation only Fix from $1,9502018-01-18 HIGH 7.4 CVE-2018-0102 A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, r… Nx Os Mitigation only Fix from $1,9502018-01-18 MEDIUM 6.7 CVE-2018-0115 A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to exe… Staros Mitigation only Fix from $1,6002018-01-18 MEDIUM 5.3 CVE-2018-0105 A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. … Unified Communications Manager Mitigation only Fix from $1,6002018-01-18 MEDIUM 5.3 CVE-2018-0108 A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to collect customer files via an out-of-band XML Exter… Webex Meetings Server Mitigation only Fix from $1,6002018-01-18 MEDIUM 5.3 CVE-2018-0111 A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the application. An att… Webex Meetings Server Mitigation only Fix from $1,6002018-01-18