Cisco Security Vulnerabilities (CVEs)

This vulnerability in Cisco Catalyst SD-WAN Manager allows authenticated local users with low privileges to escalate to root privileges through the RE...

An unauthenticated remote attacker can exploit Skill Scanner's API Server to cause denial of service through resource exhaustion or upload arbitrary f...

This critical vulnerability allows unauthenticated remote attackers to execute arbitrary commands on affected Cisco Unified Communications systems by ...

An authenticated cross-site scripting (XSS) vulnerability in Cisco ISE and ISE-PIC web management interfaces allows attackers with administrative cred...

This stored XSS vulnerability in Cisco EPNM and Prime Infrastructure allows authenticated administrators to inject malicious scripts into the web inte...

This stored XSS vulnerability in Cisco ISE's web management interface allows authenticated administrators to inject malicious scripts that execute whe...

An unauthenticated cross-site scripting (XSS) vulnerability in Cisco Catalyst Center's web management interface allows remote attackers to execute mal...

This vulnerability in Cisco Catalyst Center allows authenticated users with read-only (Observer) privileges to perform administrative operations due t...

This vulnerability allows authenticated attackers with at least Observer role credentials to execute arbitrary commands as root in a restricted contai...

This vulnerability allows authenticated administrators in Cisco Unified CCX web UI to perform directory traversal attacks, potentially accessing arbit...

This vulnerability allows authenticated administrators on Cisco Unified CCX systems to upload and execute arbitrary files through the web UI, potentia...

This vulnerability allows authenticated administrators in Cisco Unified CCX to upload and execute arbitrary files via the web UI, leading to remote co...

This vulnerability in Cisco ISE allows authenticated read-only administrators to view sensitive passwords that should only be accessible to high-privi...

An unauthenticated remote attacker can cause Cisco Identity Services Engine (ISE) to restart unexpectedly by sending crafted RADIUS access request mes...

This CVE describes reflected cross-site scripting (XSS) vulnerabilities in Cisco ISE and ISE-PIC web management interfaces. An authenticated attacker ...

This vulnerability allows authenticated attackers with low privileges to conduct reflected cross-site scripting (XSS) attacks against Cisco ISE and IS...

This vulnerability allows authenticated attackers with low-privileged accounts to conduct reflected cross-site scripting (XSS) attacks against Cisco I...

This vulnerability allows authenticated administrators on Cisco TelePresence and RoomOS systems to view unencrypted credentials in audit logs when SIP...

A buffer overflow vulnerability in Cisco phone web interfaces allows unauthenticated remote attackers to cause denial of service by sending crafted HT...

An authenticated cross-site scripting (XSS) vulnerability in Cisco Cyber Vision Center's web management interface allows attackers with administrative...

An unauthenticated cross-site scripting (XSS) vulnerability in Cisco Unified Communications Manager IM & Presence Service web interface allows attacke...

An authentication bypass vulnerability in Cisco desk and IP phones allows unauthenticated remote attackers to write arbitrary files to specific direct...

An information disclosure vulnerability in Cisco phone systems allows unauthenticated remote attackers to access sensitive information when Web Access...

An authenticated attacker with administrative credentials can inject malicious scripts into Cisco EPNM/Prime Infrastructure web interface fields, whic...

This vulnerability allows authenticated attackers with Config Managers credentials to upload arbitrary files to Cisco EPNM systems via the web managem...

This vulnerability allowed unauthenticated remote attackers to redirect Cisco Webex Meetings users to malicious websites through specially crafted mee...

This CSRF vulnerability in Cisco Unified Communications Manager allows unauthenticated remote attackers to trick authenticated users into performing u...

This vulnerability allowed authenticated low-privileged attackers to conduct cross-site scripting (XSS) attacks against Cisco Webex Meetings users via...

This vulnerability allows authenticated low-privileged attackers to bypass authorization controls on REST API endpoints in Cisco Nexus Dashboard and N...

This vulnerability allows authenticated administrators to exploit path traversal via crafted backup files in Cisco Nexus Dashboard, potentially gainin...

This vulnerability allows authenticated low-privileged attackers to bypass authorization controls on REST API endpoints in Cisco Nexus Dashboard and N...

This vulnerability allows an authenticated low-privileged remote attacker to bypass authorization and access troubleshoot files from different domains...

This vulnerability allows authenticated low-privileged users on Cisco Secure FMC to bypass authorization checks and access reports from different doma...

This vulnerability allows authenticated administrators on Cisco Secure Firewall Management Center to execute arbitrary commands as root due to insuffi...

An unauthenticated cross-site scripting (XSS) vulnerability in Cisco Secure Firewall Management Center (FMC) web interface allows remote attackers to ...

This vulnerability allows authenticated remote attackers with administrative credentials to bypass IP access restrictions on Cisco ISE and ISE-PIC dev...

This vulnerability in Cisco ISE and ISE-PIC allows authenticated attackers with high-privileged credentials to execute arbitrary code as root on the u...

An authenticated low-privileged attacker can exploit insufficient input validation in certain REST APIs of Cisco Prime Infrastructure and Cisco Evolve...

An authenticated cross-site scripting (XSS) vulnerability in Cisco BroadWorks CommPilot's web management interface allows attackers with administrativ...

A stored cross-site scripting (XSS) vulnerability in Cisco Enterprise Chat and Email web UI allows unauthenticated remote attackers to inject maliciou...