Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCisco wvc54gca Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.82%Jun 16, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 27.49%Jun 10, 2025
- UnknownCisco Unified IP Conference Station 7937G Crafted Packets Remote Denial of ServicePatch nowKEVEPSS 79.77%Jun 8, 2025
- UnknownCisco Smart Licensing Utility Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 51.90%Jun 7, 2025
- Critical9.9A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engine (ISE) could allow an unauthCheck if you run itEPSS 1.11%Jun 4, 2025
- Medium6.0A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operatingCheck this weekEPSS 18.00%Jun 4, 2025
- Low3.4A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device.Check this weekEPSS 17.00%Jun 4, 2025
- Low3.8A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device.Check this weekEPSS 45.00%Jun 4, 2025
- Medium5.3A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute arbitrary code on an affCheck this weekEPSS 19.00%Jun 4, 2025
- High8.8A vulnerability in the SSH connection handling of Cisco Integrated Management Controller (IMC) for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could alCheck this weekEPSS 46.00%Jun 4, 2025
- High8.7A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed deviceCheck this weekEPSS 43.00%Jun 4, 2025
- UnknownCisco secure_firewall_threat_defense Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.59%May 22, 2025
- UnknownCisco IOS HTTP Server '?/' String VulnerabilityPatch nowKEVEPSS 4.29%May 22, 2025
- Medium6.1A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check this weekEPSS 31.00%May 21, 2025
- Medium6.1A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check this weekEPSS 31.00%May 21, 2025
- Medium6.1A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check this weekEPSS 31.00%May 21, 2025
- Medium5.4A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject arbitrary commands into emails that are sent by the service.Check this weekEPSS 30.00%May 21, 2025
- Medium4.3A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service.Check this weekEPSS 20.00%May 21, 2025
- Medium6.5A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affectCheck if you run itEPSS 5.90%May 21, 2025
- Medium4.8A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) atCheck this weekEPSS 27.00%May 21, 2025
- Medium6.5A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker withCheck this weekEPSS 34.00%May 21, 2025
- Medium6.5A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remCheck this weekEPSS 63.00%May 21, 2025
- High7.1A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affecCheck this weekEPSS 42.00%May 21, 2025
- High8.6A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)Check this weekEPSS 70.00%May 21, 2025
- Medium4.3A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected sysCheck this weekEPSS 35.00%May 21, 2025