Browse CVEs

MEDIUM 6.1 CVE-2017-3889 A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a… Registered Envelope Service Mitigation only Fix from $1,6002017-04-07 MEDIUM 6.1 CVE-2017-6604 A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redi… Unified Computing System Mitigation only Fix from $1,6002017-04-07 MEDIUM 5.9 CVE-2017-3885 A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthent… Secure Firewall Management Center Mitigation only Fix from $1,6002017-04-07 MEDIUM 5.9 CVE-2017-3887 A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenti… Secure Firewall Threat Defense Mitigation only Fix from $1,6002017-04-07 MEDIUM 5.4 CVE-2017-3888 A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduc… Unified Communications Manager Mitigation only Fix from $1,6002017-04-07 MEDIUM 5.3 CVE-2016-9195 A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated,… Wireless Lan Controller Mitigation only Fix from $1,6002017-04-07 MEDIUM 5.3 CVE-2017-6599 A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to c… Ios Xr Mitigation only Fix from $1,6002017-04-07 CRITICAL 9.8 CVE-2017-3834 A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow an unaut… Aironet Access Point Firmware Mitigation only Fix from $2,3002017-04-06 HIGH 7.5 CVE-2016-9219 A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attack… Wireless Lan Controller Firmware Mitigation only Fix from $1,9502017-04-06 HIGH 7.5 CVE-2017-3832 A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to ca… Wireless Lan Controller Firmware Mitigation only Fix from $1,9502017-04-06 MEDIUM 6.5 CVE-2016-9194 A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could allow an… Wireless Lan Controller Mitigation only Fix from $1,6002017-04-06 CRITICAL 9.8 CVE-2017-3853EPSS 9% A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an unauthenticated, remote attac… Iox Mitigation only Fix from $2,3002017-03-22 HIGH 8.8 CVE-2017-3858 A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are exe… Ios Xe Mitigation only Fix from $1,9502017-03-22 HIGH 8.6 CVE-2017-3864 A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an … iOS after 15.6 Fix from $1,9502017-03-22 HIGH 8.1 CVE-2017-3852 A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an authenticated, rem… Iox Mitigation only Fix from $1,9502017-03-22 HIGH 7.5 CVE-2017-3851EPSS 5% A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component of the Cisco IOx application… Iox Mitigation only Fix from $1,9502017-03-22 HIGH 7.5 CVE-2017-3856 A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected devic… Ios Xe Mitigation only Fix from $1,9502017-03-22 HIGH 7.5 CVE-2017-3857 A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.… iOS after 15.6 Fix from $1,9502017-03-22 HIGH 7.5 CVE-2017-3859 A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthen… Ios Xe Mitigation only Fix from $1,9502017-03-22 HIGH 7.4 CVE-2017-3849 A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Cisco IOS X… iOS Mitigation only Fix from $1,9502017-03-21 MEDIUM 5.9 CVE-2017-3850 A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (3.7 thr… iOS Mitigation only Fix from $1,6002017-03-21 CRITICAL 9.8 CVE-2017-3881 KEVEPSS 99% A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated,… iOS after 15.1 Fix from $2,3002017-03-17 MEDIUM 6.5 CVE-2017-3811 An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the … Webex Meetings Server Mitigation only Fix from $1,6002017-03-17 MEDIUM 6.5 CVE-2017-3877 A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticated, remote attacker to conduct… Unified Communications Manager Mitigation only Fix from $1,6002017-03-17 MEDIUM 6.5 CVE-2017-3880 An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meeting infor… Webex Meetings Server Mitigation only Fix from $1,6002017-03-17 MEDIUM 6.1 CVE-2017-3866 A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scri… Prime Service Catalog Mitigation only Fix from $1,6002017-03-17 MEDIUM 6.1 CVE-2017-3868 A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site s… Unified Computing System Director Mitigation only Fix from $1,6002017-03-17 MEDIUM 6.1 CVE-2017-3872 A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an… Unified Communications Manager Mitigation only Fix from $1,6002017-03-17 MEDIUM 5.8 CVE-2017-3870 A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote … Web Security Appliance Mitigation only Fix from $1,6002017-03-17 MEDIUM 5.4 CVE-2017-3869 An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API… Prime Infrastructure Mitigation only Fix from $1,6002017-03-17