Cisco
25,873 known vulnerabilities
Top Products
A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an
A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment coul
A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component
A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and C
A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software co
An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to
A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000
A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexu
A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticate
An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexu
A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated,
A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communic
A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Prov
A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allo
An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, rem
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attac
A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Ad
A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker
An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to
An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to hav
A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote
A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal Enterprise Scheduler could all
A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated,
A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 50
A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco NetFlow Generation Appliance (NG
A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthentica
A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an auth
A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, rem
A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) coul
A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, rem
A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, rem
An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) cou
A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a
An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Co
A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacke
A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attac
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote atta
A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an un
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an un
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Se
A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remot
A vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an authenticated, local attac
A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows c
A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software,
A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthent
A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) coul
A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Rou
Frequently Asked Questions
How many CVEs affect Cisco?
Cisco has 25,873 CVE records in our database, including 1527 critical and 12515 high severity vulnerabilities. 90 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Cisco vulnerabilities?
Cisco has 1527 critical severity (CVSS 9.0+) and 12515 high severity (CVSS 7.0-8.9) vulnerabilities. 90 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Cisco vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Cisco products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Cisco Vulnerabilities
CyberStrike scans your infrastructure for Cisco vulnerabilities and provides real-time remediation guidance.
Get Started