Cisco
25,873 known vulnerabilities
Top Products
A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a
A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an
A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacke
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager c
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow
A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Se
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager a
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could all
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager a
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solution
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote
A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiat
A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow
A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Soft
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been ava
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic
A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV
A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traver
A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) c
A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, w
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-pri
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat
A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&
A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an authent
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment infor
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials
A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services
A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthent
A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthent
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an
A vulnerability in the web-based management interface of Cisco Catalyst Center, formerly Cisco DNA Center, could allow a
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to acce
A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remo
A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS X
A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software cou
A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, lo
A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authentica
A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs)
A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate
A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent a
A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote a
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to
A vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series
A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco I
Frequently Asked Questions
How many CVEs affect Cisco?
Cisco has 25,873 CVE records in our database, including 1527 critical and 12515 high severity vulnerabilities. 90 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Cisco vulnerabilities?
Cisco has 1527 critical severity (CVSS 9.0+) and 12515 high severity (CVSS 7.0-8.9) vulnerabilities. 90 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Cisco vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Cisco products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Cisco Vulnerabilities
CyberStrike scans your infrastructure for Cisco vulnerabilities and provides real-time remediation guidance.
Get Started