Browse CVEs

MEDIUM 6.1 CVE-2023-20005 Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, re… Secure Firewall Management Center after 7.2.3.1 Fix from $1,6002023-11-01 MEDIUM 6.1 CVE-2023-20041 Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, re… Secure Firewall Management Center Mitigation only Fix from $1,6002023-11-01 MEDIUM 6.1 CVE-2023-20074 Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, re… Secure Firewall Management Center after 7.3.1.1 Fix from $1,6002023-11-01 HIGH 7.2 CVE-2023-20273 KEVEPSS 90% A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges o… Ios Xe Mitigation only Fix from $1,9502023-10-25 MEDIUM 6.5 CVE-2023-20261 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affe… Catalyst Sd Wan Manager Mitigation only Fix from $1,6002023-10-18 CRITICAL 10.0 CVE-2023-20198 KEVEPSS 100% Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating… Ios Xe 16.12.10a / 17.3.8a+ Fix from $2,3002023-10-16 CRITICAL 9.8 CVE-2023-20101 A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, … Emergency Responder No fix yet Fix from $2,3002023-10-04 HIGH 8.8 CVE-2023-20235 A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Softwa… Ios Xe 17.3.1+ Fix from $1,9502023-10-04 HIGH 7.5 CVE-2023-20259 A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CP… Emergency Responder Mitigation only Fix from $1,9502023-10-04 CRITICAL 9.8 CVE-2023-20252 A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remot… Catalyst Sd Wan Manager Mitigation only Fix from $2,3002023-09-27 CRITICAL 9.1 CVE-2023-20186 A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an aut… iOS Mitigation only Fix from $2,3002023-09-27 HIGH 8.8 CVE-2023-20231 A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affect… Ios Xe Mitigation only Fix from $1,9502023-09-27 HIGH 8.8 CVE-2023-20254 A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attac… Sd Wan Manager 20.6.3.4 / 20.9.3.2+ Fix from $1,9502023-09-27 HIGH 8.2 CVE-2023-20223 A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a repository that belongs to an intern… Dna Center 2.3.5.4+ Fix from $1,9502023-09-27 HIGH 7.5 CVE-2023-20187 A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Rout… Ios Xe Mitigation only Fix from $1,9502023-09-27 HIGH 7.5 CVE-2023-20226 A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticate… Ios Xe Mitigation only Fix from $1,9502023-09-27 HIGH 7.5 CVE-2023-20227 A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a … Ios Xe Mitigation only Fix from $1,9502023-09-27 HIGH 7.5 CVE-2023-20262 A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulti… Catalyst Sd Wan Manager 20.3.7 / 20.9.3+ Fix from $1,9502023-09-27 MEDIUM 6.5 CVE-2023-20202 A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, a… Ios Xe Mitigation only Fix from $1,6002023-09-27 MEDIUM 5.5 CVE-2023-20253 A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypa… Catalyst Sd Wan Manager 20.6.2+ Fix from $1,6002023-09-27 MEDIUM 5.3 CVE-2023-20251 A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to caus… Mobility Express Software Mitigation only Fix from $1,6002023-09-27 HIGH 8.6 CVE-2023-20033 A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote attacker to… Ios Xe Mitigation only Fix from $1,9502023-09-27 HIGH 8.6 CVE-2023-20176 A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary … Catalyst 9166 Firmware 17.6.6+ Fix from $1,9502023-09-27 HIGH 7.5 CVE-2023-20034 Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access th… Sd Wan 20.3.4+ Fix from $1,9502023-09-27 MEDIUM 6.6 CVE-2023-20109 KEV A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authentic… iOS Mitigation only Fix from $1,6002023-09-27 MEDIUM 5.4 CVE-2023-20179 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, … Sd Wan Vmanage 20.6.6 / 20.10+ Fix from $1,6002023-09-27 HIGH 7.8 CVE-2023-20236 A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software ima… Ios Xr 7.10.1+ Fix from $1,9502023-09-13 HIGH 7.5 CVE-2023-20191 A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unaut… Ios Xr 7.7.21 / 7.9.2+ Fix from $1,9502023-09-13 HIGH 7.0 CVE-2023-20135 A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the unde… Ios Xr 7.6 / 7.10.1+ Fix from $1,9502023-09-13 MEDIUM 6.5 CVE-2023-20233 A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause … Ios Xr 7.5.4 / 7.6.3+ Fix from $1,6002023-09-13