Cisco
25,873 known vulnerabilities
Top Products
A vulnerability in the auto discovery phase of Cisco Spark Hybrid Calendar Service could allow an unauthenticated, remot
A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers c
A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthe
A vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow an authenticated, loca
A vulnerability in the web-based management interface of Cisco Videoscape AnyRes Live could allow an authenticated, remo
A vulnerability in the web-based management interface of Cisco Unified Computing System (UCS) Director could allow an un
A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could all
A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers c
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic
A vulnerability in certain CLI commands of Cisco Identity Services Engine (ISE) could allow an authenticated, local atta
A vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE) could allow an authentica
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic
A vulnerability in specific CLI commands for the Cisco Identity Services Engine could allow an authenticated, local atta
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticate
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem communication channel through the Cisco 550X
A vulnerability in the web-based management interface of the (cloud based) Cisco Registered Envelope Service could allow
A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could all
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 co
A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthen
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local atta
A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attac
Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS cip
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthentic
A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthent
A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, rem
A vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated, remote attacker to send unso
A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-
A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacke
A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cros
A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Con
A vulnerability in the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker
A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could all
A vulnerability in the Interactive Voice Response (IVR) management connection interface for Cisco Unified Customer Voice
A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Softw
A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass
A vulnerability in the authentication functionality of the web-based service portal of Cisco Elastic Services Controller
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attack
A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to
A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitiv
A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacke
A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, r
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenti
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenti
A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VP
A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers
A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, l
A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers c
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attack
Frequently Asked Questions
How many CVEs affect Cisco?
Cisco has 25,873 CVE records in our database, including 1527 critical and 12515 high severity vulnerabilities. 90 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Cisco vulnerabilities?
Cisco has 1527 critical severity (CVSS 9.0+) and 12515 high severity (CVSS 7.0-8.9) vulnerabilities. 90 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Cisco vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Cisco products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Cisco Vulnerabilities
CyberStrike scans your infrastructure for Cisco vulnerabilities and provides real-time remediation guidance.
Get Started