Browse CVEs

HIGH 8.8 CVE-2018-0427EPSS 6% A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perf… Application Policy Infrastructure Controller Enterprise Module Mitigation only Fix from $1,9502018-08-15 HIGH 8.6 CVE-2018-0418 A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services Router Software could allow a… Ios Xr after 6.3.3_base Fix from $1,9502018-08-15 HIGH 7.5 CVE-2018-0419 A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker t… Email Security Appliance Mitigation only Fix from $1,9502018-08-15 MEDIUM 6.7 CVE-2018-0428 A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate pri… Web Security Appliance Mitigation only Fix from $1,6002018-08-15 HIGH 8.6 CVE-2018-0410 A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote att… Web Security Appliance Mitigation only Fix from $1,9502018-08-15 HIGH 7.5 CVE-2018-0409 A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Vi… Telepresence Video Communication Server Mitigation only Fix from $1,9502018-08-15 MEDIUM 6.8 CVE-2018-0415 A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireles… Wap121 Firmware after 1.0.6.6 Fix from $1,6002018-08-15 MEDIUM 6.1 CVE-2018-0386 A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scrip… Hosted Collaboration Solution Mitigation only Fix from $1,6002018-08-15 MEDIUM 5.4 CVE-2018-0367 A vulnerability in the web-based management interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to condu… Registered Envelope Service Mitigation only Fix from $1,6002018-08-15 MEDIUM 5.3 CVE-2018-0412 A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireles… Wap121 Firmware after 1.0.6.6 Fix from $1,6002018-08-15 MEDIUM 5.9 CVE-2018-0131 A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote … iOS Mitigation only Fix from $1,6002018-08-14 HIGH 7.8 CVE-2018-0429 Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows local users to cause a denial of … Thor Video Codec 2018-8-8+ Fix from $1,9502018-08-09 HIGH 8.8 CVE-2018-0413 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cond… Identity Services Engine Software No fix yet Fix from $1,9502018-08-01 MEDIUM 6.5 CVE-2018-0391 A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the … Prime Collaboration after 12.2 Fix from $1,6002018-08-01 MEDIUM 6.1 CVE-2018-0406 A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduc… Web Security Appliance Mitigation only Fix from $1,6002018-08-01 MEDIUM 6.1 CVE-2018-0411 A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cond… Unified Communications Manager Mitigation only Fix from $1,6002018-08-01 MEDIUM 5.9 CVE-2018-0397 A vulnerability in Cisco AMP for Endpoints Mac Connector Software installed on Apple macOS 10.12 could allow an unauthenticated, remote attacker to c… Advanced Malware Protection For Endpoints Patch available Fix from $1,6002018-08-01 MEDIUM 5.4 CVE-2018-0407 A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticated, remot… Sf300 08 Firmware after 1.4.7.06 Fix from $1,6002018-08-01 MEDIUM 5.4 CVE-2018-0408 A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticated, remot… Sf300 08 Firmware after 1.4.7.06 Fix from $1,6002018-08-01 CRITICAL 9.8 CVE-2018-0398 Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-s… Finesse Mitigation only Fix from $2,3002018-07-18 CRITICAL 9.8 CVE-2018-0399 Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a clearte… Finesse Mitigation only Fix from $2,3002018-07-18 CRITICAL 9.8 CVE-2018-0403 Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, … Unified Contact Center Express Mitigation only Fix from $2,3002018-07-18 HIGH 8.8 CVE-2018-0387 A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on the user's … Webex Teams Mitigation only Fix from $1,9502018-07-18 HIGH 8.8 CVE-2018-0394 A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to obtain restricted s… Cloud Services Platform 2100 Mitigation only Fix from $1,9502018-07-18 HIGH 8.8 CVE-2018-0402 Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, … Unified Contact Center Express Mitigation only Fix from $1,9502018-07-18 MEDIUM 6.5 CVE-2018-0393 A Read-Only User Effect Change vulnerability in the Policy Builder interface of Cisco Policy Suite could allow an authenticated, remote attacker to m… Mobility Services Engine 3365 Firmware Mitigation only Fix from $1,6002018-07-18 MEDIUM 6.1 CVE-2018-0390 A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based (DOM-bas… Webex Meetings Mitigation only Fix from $1,6002018-07-18 MEDIUM 6.1 CVE-2018-0396 A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remot… Unified Communications Manager Im And Presence Service Mitigation only Fix from $1,6002018-07-18 MEDIUM 6.1 CVE-2018-0400 Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, … Unified Contact Center Express Mitigation only Fix from $1,6002018-07-18 MEDIUM 6.1 CVE-2018-0401 Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, … Unified Contact Center Express Mitigation only Fix from $1,6002018-07-18