Browse CVEs

MEDIUM 6.5 CVE-2024-20396 A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain access to sensitive information. … Webex Teams Mitigation only Fix from $1,6002024-07-17 HIGH 7.5 CVE-2024-20323 A vulnerability in Cisco Intelligent Node (iNode) Software could allow an unauthenticated, remote attacker to hijack the TLS connection between Cisco… Inode 4.0.0 / 24.1+ Fix from $1,9502024-07-17 HIGH 7.3 CVE-2024-20395 A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive… Webex Teams Mitigation only Fix from $1,9502024-07-17 HIGH 7.2 CVE-2024-20296 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload… Identity Services Engine 3.1+ Fix from $1,9502024-07-17 MEDIUM 6.7 CVE-2024-20456 A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Se… Ios Xr Mitigation only Fix from $1,6002024-07-10 MEDIUM 6.7 CVE-2024-20399 KEV A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary … Nx Os Mitigation only Fix from $1,6002024-07-01 MEDIUM 6.1 CVE-2024-20405 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack… Finesse 11.6+ Fix from $1,6002024-06-05 MEDIUM 5.3 CVE-2024-20404EPSS 23% A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on a… Finesse 11.6+ Fix from $1,6002024-06-05 HIGH 8.8 CVE-2024-20360 A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attack… Secure Firewall Management Center Mitigation only Fix from $1,9502024-05-22 MEDIUM 5.8 CVE-2024-20293 A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defe… Adaptive Security Appliance Software after 9.19.1.24 Fix from $1,6002024-05-22 MEDIUM 5.8 CVE-2024-20361 A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unaut… Secure Firewall Management Center Mitigation only Fix from $1,6002024-05-22 MEDIUM 5.8 CVE-2024-20363 Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticate… Secure Firewall Threat Defense 3.1.69.0+ Fix from $1,6002024-05-22 MEDIUM 5.0 CVE-2024-20355 A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Soft… Adaptive Security Appliance Software Mitigation only Fix from $1,6002024-05-22 MEDIUM 5.8 CVE-2024-20261 A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense (FTD) Software could all… Secure Firewall Threat Defense Mitigation only Fix from $1,6002024-05-22 HIGH 7.8 CVE-2024-20326 A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attac… Confd Basic 5.4 / 5.5+ Fix from $1,9502024-05-16 HIGH 7.8 CVE-2024-20389 A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attac… Crosswork Network Services Orchestrator Mitigation only Fix from $1,9502024-05-16 MEDIUM 6.8 CVE-2024-20391 A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an … Secure Client 5.1.3.62+ Fix from $1,6002024-05-15 MEDIUM 6.1 CVE-2024-20392 A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attac… Asyncos No fix yet Fix from $1,6002024-05-15 MEDIUM 5.5 CVE-2024-20394 A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a denial of service (DoS) condi… Appdynamics 24.4.0+ Fix from $1,6002024-05-15 HIGH 8.4 CVE-2024-20383 A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager could allow an authenticated, … Asyncos 15.5.1-024+ Fix from $1,9502024-05-15 HIGH 7.8 CVE-2024-20366 A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Services Orchestrator (NSO) cou… Network Services Orchestrator 5.0.5 / 6.0.2+ Fix from $1,9502024-05-15 MEDIUM 6.1 CVE-2024-20258 A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could… Asyncos 15.0.2-034 / 15.5.1-024+ Fix from $1,6002024-05-15 MEDIUM 6.1 CVE-2024-20369 A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote a… Network Services Orchestrator 5.5.10.1 / 5.6.14.3+ Fix from $1,6002024-05-15 HIGH 7.5 CVE-2024-20376 A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected… Video Phone 8875 Firmware 2.3.1.0101+ Fix from $1,9502024-05-01 HIGH 7.5 CVE-2024-20378 A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitiv… Ip Phone 6821 With Multiplatform Firmware 12.0.4+ Fix from $1,9502024-05-01 MEDIUM 5.9 CVE-2024-20357 A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected … Ip Phone 6871 With Multiplatform Firmware after 12.0.4 Fix from $1,6002024-05-01 HIGH 7.4 CVE-2024-20313 A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affecte… Ios Xe Mitigation only Fix from $1,9502024-04-24 MEDIUM 5.4 CVE-2023-20248 A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow an authenticated, remote atta… Telepresence Management Suite 15.13.6+ Fix from $1,6002024-04-24 MEDIUM 5.4 CVE-2023-20249 A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow an authenticated, remote atta… Telepresence Management Suite 15.13.6+ Fix from $1,6002024-04-24 MEDIUM 6.7 CVE-2024-20358 A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Thre… Adaptive Security Appliance Software Mitigation only Fix from $1,6002024-04-24