Browse CVEs

HIGH 8.6 CVE-2018-0086 A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticated, remote attacker to cause a… Unified Customer Voice Portal after 11.5 Fix from $1,9502018-01-18 HIGH 7.8 CVE-2018-0095 A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) … Asyncos Mitigation only Fix from $1,9502018-01-18 HIGH 7.5 CVE-2018-0089 A vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy Suite (CPS) could allow an unauthenticated, remote attacker to a… Policy Suite Mitigation only Fix from $1,9502018-01-18 HIGH 7.5 CVE-2018-0090 A vulnerability in management interface access control list (ACL) configuration of Cisco NX-OS System Software could allow an unauthenticated, remote… Nx Os Mitigation only Fix from $1,9502018-01-18 HIGH 7.5 CVE-2018-0094 A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of… Unified Computing System Central Software Mitigation only Fix from $1,9502018-01-18 HIGH 7.1 CVE-2018-0092 A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenticated, local attacker to impr… Nx Os Mitigation only Fix from $1,9502018-01-18 MEDIUM 6.7 CVE-2018-0088 A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software could allow a… Industrial Ethernet 4010 Series Firmware Mitigation only Fix from $1,6002018-01-18 MEDIUM 6.1 CVE-2017-12307 A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a r… Sg350 10 Firmware 1.4.9.4+ Fix from $1,6002018-01-18 MEDIUM 6.1 CVE-2017-12308 A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an … Sg350 10 Firmware 1.4.9.4+ Fix from $1,6002018-01-18 MEDIUM 6.1 CVE-2018-0091 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cond… Identity Services Engine Mitigation only Fix from $1,6002018-01-18 MEDIUM 6.1 CVE-2018-0093 A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduc… Web Security Appliance Mitigation only Fix from $1,6002018-01-18 MEDIUM 6.1 CVE-2018-0097 A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious … Prime Infrastructure Mitigation only Fix from $1,6002018-01-18 MEDIUM 6.1 CVE-2018-0098 A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power over Ethernet (PoE) and WAP361… Wap361 Firmware Mitigation only Fix from $1,6002018-01-18 MEDIUM 5.9 CVE-2018-0096 A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to … Prime Infrastructure Mitigation only Fix from $1,6002018-01-18 MEDIUM 6.1 CVE-2018-0118 A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to perf… Unified Communications Manager Mitigation only Fix from $1,6002018-01-11 CRITICAL 9.6 CVE-2018-0104 A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary … Webex Business Suite Mitigation only Fix from $2,3002018-01-04 HIGH 7.8 CVE-2018-0103 A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a local attacker to exe… Webex Business Suite Mitigation only Fix from $1,9502018-01-04 HIGH 7.5 CVE-2018-0114EPSS 43% A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a ke… Node Jose 0.11.0+ Fix from $1,9502018-01-04 MEDIUM 5.9 CVE-2017-12373EPSS 13% A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allow an unau… Adaptive Security Appliance 5505 Firmware Mitigation only Fix from $1,6002017-12-15 MEDIUM 6.4 CVE-2017-6679 The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated fro… Umbrella Virtual Appliance 2.1.0+ Fix from $1,6002017-12-01 CRITICAL 9.6 CVE-2017-12367 A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format… Webex Meetings Server Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.6 CVE-2017-12368 A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Fo… Webex Meetings Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.6 CVE-2017-12369 A "Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (AR… Webex Meetings Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.6 CVE-2017-12370 A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Fo… Webex Meetings Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.6 CVE-2017-12371 A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Fo… Webex Meetings Mitigation only Fix from $2,3002017-11-30 CRITICAL 9.6 CVE-2017-12372 A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Fo… Webex Meetings Server Mitigation only Fix from $2,3002017-11-30 MEDIUM 6.7 CVE-2017-12352 A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an … Application Policy Infrastructure Controller Mitigation only Fix from $1,6002017-11-30 MEDIUM 6.5 CVE-2017-12359 A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker to execute… Webex Meeting Center Mitigation only Fix from $1,6002017-11-30 MEDIUM 6.5 CVE-2017-12362 A vulnerability in Cisco Meeting Server versions prior to 2.2.2 could allow an authenticated, remote attacker to cause the system to reload, resultin… Meeting Server 2.2.2+ Fix from $1,6002017-11-30 MEDIUM 6.5 CVE-2017-12364 A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unauthor… Prime Service Catalog Mitigation only Fix from $1,6002017-11-30