Browse CVEs

HIGH 7.8 CVE-2020-3173 A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitr… Ucs Manager 3.2 / 4.0+ Fix from $1,9502020-02-26 MEDIUM 6.7 CVE-2020-3169 A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux … Firepower Extensible Operating System 2.2.2.97 / 2.3.1.144+ Fix from $1,6002020-02-26 MEDIUM 5.3 CVE-2020-3170 A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to un… Nx Os 8.2 / 8.4+ Fix from $1,6002020-02-26 HIGH 8.2 CVE-2020-3165 A vulnerability in the implementation of Border Gateway Protocol (BGP) Message Digest 5 (MD5) authentication in Cisco NX-OS Software could allow an u… Nx Os Mitigation only Fix from $1,9502020-02-26 HIGH 7.8 CVE-2020-3167 A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary co… Secure Firewall Threat Defense 2.4.1.234 / 3.2+ Fix from $1,9502020-02-26 HIGH 7.5 CVE-2020-3168 A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote att… Nx Os Mitigation only Fix from $1,9502020-02-26 MEDIUM 6.7 CVE-2020-3166 A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying ope… Secure Firewall Threat Defense 2.2.2.97 / 2.3.1.155+ Fix from $1,6002020-02-26 CRITICAL 9.1 CVE-2020-3158 A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to acce… Smart Software Manager On Prem 7-202001+ Fix from $2,3002020-02-19 MEDIUM 6.7 CVE-2020-3138 A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to inst… Enterprise Network Function Virtualization Infrastructure after 3.11.1 Fix from $1,6002020-02-19 MEDIUM 6.5 CVE-2020-3153 KEVEPSS 27% A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy… Anyconnect Secure Mobility Client 4.8.02042+ Fix from $1,6002020-02-19 MEDIUM 6.1 CVE-2020-3156 A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scrip… Identity Services Engine Mitigation only Fix from $1,6002020-02-19 MEDIUM 6.1 CVE-2020-3159 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site script… Finesse 12.5+ Fix from $1,6002020-02-19 MEDIUM 5.9 CVE-2020-3163 A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial … Unified Contact Center Enterprise 12.5+ Fix from $1,6002020-02-19 MEDIUM 5.3 CVE-2020-3160 A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, rem… Meeting Server 2.8.0+ Fix from $1,6002020-02-19 HIGH 8.8 CVE-2020-3112 A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privile… Data Center Network Manager 11.3+ Fix from $1,9502020-02-19 HIGH 8.8 CVE-2020-3114 A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to … Data Center Network Manager 11.3+ Fix from $1,9502020-02-19 HIGH 8.4 CVE-2019-1950 A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The… Ios Xe after 16.11 Fix from $1,9502020-02-19 MEDIUM 5.9 CVE-2020-3132 A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticat… Cloud Email Security 12.5.1-037 / 13.0.0-375+ Fix from $1,6002020-02-19 MEDIUM 5.4 CVE-2020-3113 A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to co… Data Center Network Manager 11.3+ Fix from $1,6002020-02-19 HIGH 7.5 CVE-2011-2054 A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Seconda… Asa 5500 Firmware Mitigation only Fix from $1,9502020-02-19 MEDIUM 6.1 CVE-2015-0749 A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attac… Unified Communications Manager after 10.5 Fix from $1,6002020-02-19 HIGH 7.5 CVE-2011-4661 A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (aka CSCtu52820), when configur… iOS 15.2+ Fix from $1,9502020-02-12 HIGH 7.5 CVE-2013-1202 Cisco ACE A2(3.6) allows log retention DoS. Ace Application Control Engine Module A2 No fix yet Fix from $1,9502020-02-07 HIGH 8.8 CVE-2013-3568EPSS 25% Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentication of users for requests th… Linksys Wrt110 Firmware No fix yet Fix from $1,9502020-02-06 MEDIUM 6.1 CVE-2013-2684 Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web script or HTML via unspecifi… Linksys E4200 Firmware No fix yet Fix from $1,6002020-02-06 MEDIUM 5.3 CVE-2013-2683EPSS 13% Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP address… Linksys E4200 Firmware No fix yet Fix from $1,6002020-02-06 CRITICAL 9.8 CVE-2013-2681EPSS 10% Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to gain unauthorized access. Linksys E4200 Firmware No fix yet Fix from $2,3002020-02-05 HIGH 7.5 CVE-2013-2680EPSS 9% Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information. Linksys E4200 Firmware No fix yet Fix from $1,9502020-02-05 MEDIUM 6.5 CVE-2020-3120 A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow a… Firepower Extensible Operating System 2.6.1.187 / 2.7.1.106+ Fix from $1,6002020-02-05 HIGH 8.8 CVE-2020-3110EPSS 6% A vulnerability in the Cisco Discovery Protocol implementation for the Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated… Video Surveillance 8400 Ip Camera Firmware 1.0.7+ Fix from $1,9502020-02-05