Cisco
25,873 known vulnerabilities
Top Products
A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attac
Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is s
A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System (IS-IS) protocol of Ci
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write fi
A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attac
A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is use
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the
A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergen
A vulnerability in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software could allow an unauthen
A vulnerability in Cisco Duo Epic for Hyperdrive could allow an authenticated, local attacker to view sensitive informat
A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as a
A vulnerability in specific CLI commands in Cisco Identity Services Engine (ISE) could allow an authenticated, local att
A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive inf
A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an a
A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local at
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local at
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local at
A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat
Multiple vulnerabilities in the REST API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote at
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni
A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unifi
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond
A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to exe
A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authentic
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauth
A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unau
A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote
A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain acce
A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacke
A vulnerability in Cisco Intelligent Node (iNode) Software could allow an unauthenticated, remote attacker to hijack the
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high priv
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator cred
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker t
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker t
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an
Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that
A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC)
A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive
A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software an
A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Def
A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated
A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated
Frequently Asked Questions
How many CVEs affect Cisco?
Cisco has 25,873 CVE records in our database, including 1527 critical and 12515 high severity vulnerabilities. 90 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Cisco vulnerabilities?
Cisco has 1527 critical severity (CVSS 9.0+) and 12515 high severity (CVSS 7.0-8.9) vulnerabilities. 90 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Cisco vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Cisco products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Cisco Vulnerabilities
CyberStrike scans your infrastructure for Cisco vulnerabilities and provides real-time remediation guidance.
Get Started