Browse CVEs

MEDIUM 5.4 CVE-2022-20963 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduc… Identity Services Engine 2.7.0+ Fix from $1,6002022-11-04 MEDIUM 5.4 CVE-2022-20969 A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote attacker to conduct a cross-site script… Umbrella Mitigation only Fix from $1,6002022-11-04 MEDIUM 5.3 CVE-2022-20937 A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote at… Identity Services Engine 2.7.0+ Fix from $1,6002022-11-04 HIGH 8.8 CVE-2022-20868 A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appl… Asyncos 12.5.5 / 14.0.4+ Fix from $1,9502022-11-04 MEDIUM 6.5 CVE-2022-20867 A vulnerability in web-based management interface of the of Cisco Email Security Appliance and Cisco Secure Email and Web Manager could allow an auth… Asyncos 14.2.0 / 14.2.1+ Fix from $1,6002022-11-04 MEDIUM 5.3 CVE-2022-20772 A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to con… Email Security Appliance Firmware 14.0.3-015 / 14.2.0-217+ Fix from $1,6002022-11-04 HIGH 7.1 CVE-2022-20954 Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path… Telepresence Collaboration Endpoint 10.19.1+ Fix from $1,9502022-10-26 HIGH 7.1 CVE-2022-20955 Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path… Telepresence Collaboration Endpoint 10.19.1+ Fix from $1,9502022-10-26 MEDIUM 5.4 CVE-2022-20959 A vulnerability in the External RESTful Services (ERS) API of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote atta… Identity Services Engine 2.7.0+ Fix from $1,6002022-10-26 HIGH 8.6 CVE-2022-20933 A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, … Meraki Mx64 Firmware 16.16.6 / 17.10.1+ Fix from $1,9502022-10-26 HIGH 8.1 CVE-2022-20822 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read a… Identity Services Engine Mitigation only Fix from $1,9502022-10-26 HIGH 7.2 CVE-2022-20811 Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path… Telepresence Collaboration Endpoint 9.15.13.0 / 10.15.1+ Fix from $1,9502022-10-26 MEDIUM 6.7 CVE-2022-20776 Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path… Telepresence Collaboration Endpoint 10.20.1+ Fix from $1,6002022-10-26 MEDIUM 5.5 CVE-2022-20953 Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path… Telepresence Collaboration Endpoint 10.19.1+ Fix from $1,6002022-10-26 HIGH 8.6 CVE-2022-20837 A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NAT) in Cisco IOS XE Software c… Ios Xe Mitigation only Fix from $1,9502022-10-10 HIGH 8.6 CVE-2022-20870 A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Fami… Ios Xe Mitigation only Fix from $1,9502022-10-10 HIGH 7.7 CVE-2022-20920 A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an a… iOS Mitigation only Fix from $1,9502022-10-10 HIGH 7.4 CVE-2022-20915 A vulnerability in the implementation of IPv6 VPN over MPLS (6VPE) with Zone-Based Firewall (ZBFW) of Cisco IOS XE Software could allow an unauthenti… Ios Xe Mitigation only Fix from $1,9502022-10-10 MEDIUM 6.8 CVE-2022-20944 A vulnerability in the software image verification functionality of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unau… Ios Xe Mitigation only Fix from $1,6002022-10-10 MEDIUM 5.3 CVE-2022-20830 A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an una… Catalyst Sd Wan Manager 20.3.4.1 / 20.6.1+ Fix from $1,6002022-10-10 HIGH 7.5 CVE-2022-20856 A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) Mobility messages in Cisco IOS XE Wireless Controlle… Ios Xe Mitigation only Fix from $1,9502022-09-30 HIGH 7.5 CVE-2022-20919 A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software… Ios Xe Mitigation only Fix from $1,9502022-09-30 MEDIUM 6.7 CVE-2022-20930 A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affect… Catalyst Sd Wan Manager 20.6.2+ Fix from $1,6002022-09-30 MEDIUM 6.5 CVE-2022-20945 A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow an unauthenticated, adjacent… Catalyst 9800 L Firmware 17.6.4+ Fix from $1,6002022-09-30 HIGH 7.5 CVE-2022-20847 A vulnerability in the DHCP processing functionality of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthe… Ios Xe Mitigation only Fix from $1,9502022-09-30 HIGH 7.5 CVE-2022-20848 A vulnerability in the UDP processing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points … Ios Xe Mitigation only Fix from $1,9502022-09-30 HIGH 7.2 CVE-2022-20851 A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against a… Ios Xe Mitigation only Fix from $1,9502022-09-30 HIGH 7.1 CVE-2022-20850 A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to dele… Sd Wan Vbond Orchestrator 16.10.1 / 18.4.5+ Fix from $1,9502022-09-30 MEDIUM 6.7 CVE-2022-20855 A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points could allow an… Ios Xe Mitigation only Fix from $1,6002022-09-30 HIGH 7.8 CVE-2022-20775 KEVEPSS 12% A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability i… Catalyst Sd Wan Manager 20.6.3 / 20.7.2+ Fix from $1,9502022-09-30