Browse CVEs

MEDIUM 6.1 CVE-2017-12258 A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame … Unified Communications Manager Mitigation only Fix from $1,6002017-10-05 MEDIUM 6.1 CVE-2017-12265 A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote atta… Adaptive Security Appliance Mitigation only Fix from $1,6002017-10-05 MEDIUM 5.4 CVE-2017-12269 A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-site scriptin… Spark Mitigation only Fix from $1,6002017-10-05 MEDIUM 5.3 CVE-2017-12264 A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Meeting Server Mitigation only Fix from $1,6002017-10-05 MEDIUM 5.3 CVE-2017-12267 A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) could allow a… Virtual Wide Area Application Services Mitigation only Fix from $1,6002017-10-05 CRITICAL 9.8 CVE-2017-12240 KEVEPSS 14% The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remot… iOS after 15.6 Fix from $2,3002017-09-29 MEDIUM 6.8 CVE-2017-12239 A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband… Ios Xe Mitigation only Fix from $1,6002017-09-29 CRITICAL 9.8 CVE-2017-12229EPSS 5% A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, remote atta… Ios Xe Mitigation only Fix from $2,3002017-09-29 CRITICAL 9.8 CVE-2017-12236 A vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, r… Ios Xe Mitigation only Fix from $2,3002017-09-29 HIGH 8.8 CVE-2017-12226 A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Super… Ios Xe Mitigation only Fix from $1,9502017-09-29 HIGH 8.8 CVE-2017-12230 A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow an authenticated, remote attacker to elevate their privileg… Ios Xe Mitigation only Fix from $1,9502017-09-29 HIGH 7.5 CVE-2017-12231 KEVEPSS 7% A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticate… iOS after 15.6 Fix from $1,9502017-09-29 HIGH 7.5 CVE-2017-12233 KEVEPSS 7% Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthen… iOS after 15.6 Fix from $1,9502017-09-29 HIGH 7.5 CVE-2017-12234 KEVEPSS 7% Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthen… iOS after 15.6 Fix from $1,9502017-09-29 HIGH 7.5 CVE-2017-12235 KEVEPSS 7% A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an un… iOS after 15.6 Fix from $1,9502017-09-29 HIGH 7.5 CVE-2017-12237 KEVEPSS 7% A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an… iOS after 16.5 Fix from $1,9502017-09-29 MEDIUM 6.5 CVE-2017-12222 A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch… Ios Xe Mitigation only Fix from $1,6002017-09-29 MEDIUM 6.5 CVE-2017-12232 KEV A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through… iOS after 15.6 Fix from $1,6002017-09-29 MEDIUM 6.5 CVE-2017-12238 KEV A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an … iOS after 15.4 Fix from $1,6002017-09-29 MEDIUM 5.9 CVE-2017-12228 A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauth… iOS after 15.4 Fix from $1,6002017-09-29 MEDIUM 5.9 CVE-2011-4667 The encryption library in Cisco IOS Software 15.2(1)T, 15.2(1)T1, and 15.2(2)T, Cisco NX-OS in Cisco MDS 9222i Multiservice Modular Switch, Cisco MDS… iOS Mitigation only Fix from $1,6002017-09-25 MEDIUM 6.5 CVE-2010-3050 Cisco IOS before 12.2(33)SXI allows remote authenticated users to cause a denial of service (device reboot). iOS after 12.2 Fix from $1,6002017-09-25 MEDIUM 5.5 CVE-2010-3049 Cisco IOS before 12.2(33)SXI allows local users to cause a denial of service (device reboot). iOS after 12.2 Fix from $1,6002017-09-25 MEDIUM 6.5 CVE-2017-6720 A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker t… Sf302 08pp Firmware 1.4.8.06+ Fix from $1,6002017-09-21 HIGH 8.8 CVE-2017-12214 A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Customer Voi… Unified Customer Voice Portal Mitigation only Fix from $1,9502017-09-21 HIGH 8.8 CVE-2017-12253 A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerabili… Unified Intelligence Center Mitigation only Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-12252 A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potent… Findit Network Discovery Utility Mitigation only Fix from $1,9502017-09-21 HIGH 7.5 CVE-2017-12219 A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticat… Spa 301 Firmware Mitigation only Fix from $1,9502017-09-21 HIGH 7.1 CVE-2017-12215 A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticate… Asyncos Mitigation only Fix from $1,9502017-09-21 MEDIUM 6.7 CVE-2017-12255 A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. The vulnerability is due … Unified Computing System Mitigation only Fix from $1,6002017-09-21