Cisco
25,873 known vulnerabilities
Top Products
A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR
A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an una
A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execu
A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the
A vulnerability in the Embedded Service Router (ESR) of Cisco ISE could allow an authenticated, local attacker to read,
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower
A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated
A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthen
A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco B
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers
A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communica
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overw
A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (
A vulnerability in the Simple Network Management Protocol (SNMP) service of Cisco FXOS Software for Firepower 4100 Serie
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco
A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, loc
A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in stand
A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of serv
A vulnerability in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access intern
A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express (Unified CCX) could allow an unaut
A vulnerability in the CryptoService function of Cisco Duo Device Health Application for Windows could allow an authenti
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an a
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Netwo
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform F
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an a
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programma
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programma
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programma
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthe
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat
Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to
Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an una
A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communicat
A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem
A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain rea
A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authentica
A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthen
A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow a
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an
A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an una
OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). The AES GCM decryption ro
A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user
A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in AC
A vulnerability in the web interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct
A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a
Frequently Asked Questions
How many CVEs affect Cisco?
Cisco has 25,873 CVE records in our database, including 1527 critical and 12515 high severity vulnerabilities. 90 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Cisco vulnerabilities?
Cisco has 1527 critical severity (CVSS 9.0+) and 12515 high severity (CVSS 7.0-8.9) vulnerabilities. 90 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Cisco vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Cisco products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Cisco Vulnerabilities
CyberStrike scans your infrastructure for Cisco vulnerabilities and provides real-time remediation guidance.
Get Started