Browse CVEs

MEDIUM 6.5 CVE-2023-20112 A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on… Business 150ax Firmware 10.3.2.0+ Fix from $1,6002023-03-23 HIGH 8.8 CVE-2023-20055 A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the w… Catalyst Center 2.3.3.6+ Fix from $1,9502023-03-23 HIGH 8.6 CVE-2023-20072 A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacke… Ios Xe Mitigation only Fix from $1,9502023-03-23 HIGH 7.8 CVE-2023-20035 A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated p… Ios Xe Sd Wan Mitigation only Fix from $1,9502023-03-23 HIGH 7.8 CVE-2023-20065 A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privi… Ios Xe Mitigation only Fix from $1,9502023-03-23 HIGH 7.5 CVE-2023-20080 A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote… iOS Mitigation only Fix from $1,9502023-03-23 MEDIUM 6.8 CVE-2023-20082 A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privilege… Ios Xe 17.3.7 / 17.6.5+ Fix from $1,6002023-03-23 MEDIUM 6.5 CVE-2023-20059 A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an authenticated, remote attacke… Catalyst Center 2.3.3.7 / 2.3.5.0+ Fix from $1,6002023-03-23 MEDIUM 6.5 CVE-2023-20066 A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a directory traversal and access reso… Ios Xe Mitigation only Fix from $1,6002023-03-23 MEDIUM 6.5 CVE-2023-20067 A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticate… Ios Xe Mitigation only Fix from $1,6002023-03-23 MEDIUM 5.9 CVE-2023-20081 A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Sof… Adaptive Security Appliance Software Mitigation only Fix from $1,6002023-03-23 MEDIUM 5.5 CVE-2023-20056 A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (… Wireless Lan Controller Software 8.10.183.0 / 16.12.8+ Fix from $1,6002023-03-23 HIGH 8.6 CVE-2023-20027 A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthentica… Ios Xe Mitigation only Fix from $1,9502023-03-23 HIGH 7.8 CVE-2023-20029 A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges … Ios Xe Mitigation only Fix from $1,9502023-03-23 HIGH 7.8 CVE-2022-20929 A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local a… Enterprise Nfv Infrastructure Software 4.9.1+ Fix from $1,9502023-03-10 HIGH 7.5 CVE-2023-20049 A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregati… Ios Xr 7.5.3 / 7.6.2+ Fix from $1,9502023-03-09 CRITICAL 9.8 CVE-2023-20078EPSS 10% Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute … Ip Phone 6871 Firmware 11.3.7sr1+ Fix from $2,3002023-03-03 HIGH 7.5 CVE-2023-20079EPSS 10% Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute … Ip Phone 6871 Firmware 11.3.7sr1+ Fix from $1,9502023-03-03 HIGH 7.5 CVE-2023-20088 A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated,… Finesse 12.6+ Fix from $1,9502023-03-03 MEDIUM 6.1 CVE-2023-20104 A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site s… Webex Teams Mitigation only Fix from $1,6002023-03-03 MEDIUM 5.4 CVE-2023-20069 A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow … Evolved Programmable Network Manager 3.10.3 / 7.0+ Fix from $1,6002023-03-03 MEDIUM 6.5 CVE-2023-20061 Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perfo… Packaged Contact Center Enterprise 12.6+ Fix from $1,6002023-03-03 MEDIUM 6.7 CVE-2023-20075 Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerab… Email Security Appliance 12.5.3-041 / 13.0.5-007+ Fix from $1,6002023-03-01 MEDIUM 6.1 CVE-2023-20053 A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-sit… Nexus Dashboard 2.3+ Fix from $1,6002023-03-01 MEDIUM 6.1 CVE-2023-20085 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cond… Identity Services Engine Mitigation only Fix from $1,6002023-03-01 CRITICAL 9.8 CVE-2023-20032EPSS 29% On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of … Secure Endpoint 1.20.2 / 1.21.1+ Fix from $2,3002023-03-01 HIGH 7.5 CVE-2023-20014 A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of servi… Nexus Dashboard 2.3+ Fix from $1,9502023-03-01 HIGH 7.2 CVE-2023-20009 A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow… Email Security Appliance 12.5.3-041 / 12.8.1-021+ Fix from $1,9502023-03-01 MEDIUM 5.3 CVE-2023-20052EPSS 7% On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV vers… Secure Endpoint 1.20.2 / 1.21.1+ Fix from $1,6002023-03-01 MEDIUM 5.3 CVE-2022-20952 A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance (WSA… Asyncos 14.0.4+ Fix from $1,6002023-03-01