Cisco
Page 21 of 69 — Cisco CVEs from a corpus of 6881, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-27133 | Critical | 9.9 | 2020-12-11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-27132 | Critical | 9.9 | 2020-12-11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-27127 | Critical | 9.9 | 2020-12-11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-3586 | Critical | 9.4 | 2020-11-18 | A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary comman… |
CVE-2020-3531 | Critical | 9.8 | 2020-11-18 | A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an… |
CVE-2020-3482 | Medium | 6.5 | 2020-11-18 | A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an unauthenticated, remote attacker t… |
CVE-2020-3471 | Medium | 6.5 | 2020-11-18 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite… |
CVE-2020-3470 | Critical | 9.8 | 2020-11-18 | Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitr… |
CVE-2020-3441 | Medium | 5.3 | 2020-11-18 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view sensitive information from the… |
CVE-2020-3419 | Medium | 6.5 | 2020-11-18 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to join a Webex session without appeari… |
CVE-2020-3392 | High | 7.5 | 2020-11-18 | A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive information on an affect… |
CVE-2020-3367 | High | 7.8 | 2020-11-18 | A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance (formerly Web Security Appliance) could allow an authenti… |
CVE-2020-27126 | Medium | 6.1 | 2020-11-18 | A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is… |
CVE-2020-26081 | Medium | 6.1 | 2020-11-18 | Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to conduct cross-site scriptin… |
CVE-2020-26080 | Medium | 4.1 | 2020-11-18 | A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to manage user inf… |
CVE-2020-26079 | Medium | 4.9 | 2020-11-18 | A vulnerability in the web UI of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to obtain hashes of user passwords on an… |
CVE-2020-26078 | Medium | 6.5 | 2020-11-18 | A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to overwrite files on an affected sy… |
CVE-2020-26077 | Medium | 4.3 | 2020-11-18 | A vulnerability in the access control functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to view lists of us… |
CVE-2020-26076 | High | 7.5 | 2020-11-18 | A vulnerability in Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive database information on an affected… |
CVE-2020-26075 | High | 8.8 | 2020-11-18 | A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to gain access to the back-end database… |
CVE-2020-26072 | High | 8.7 | 2020-11-18 | A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to access and modify information on dev… |
CVE-2020-26068 | Medium | 5.5 | 2020-11-18 | A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an ac… |
CVE-2020-27131 | High | 8.1 | 2020-11-17 | Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute… |
CVE-2020-27130 | Critical | 9.1 | 2020-11-17 | A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to… |
CVE-2020-27125 | High | 7.4 | 2020-11-17 | A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerabil… |
CVE-2020-26070 | High | 8.6 | 2020-11-12 | A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauth… |
CVE-2020-3604 | High | 7.8 | 2020-11-06 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary co… |
CVE-2020-3603 | High | 7.8 | 2020-11-06 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary co… |
CVE-2020-3600 | High | 7.8 | 2020-11-06 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vul… |
CVE-2020-3595 | High | 7.8 | 2020-11-06 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system. T… |
CVE-2020-3594 | High | 7.8 | 2020-11-06 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vul… |
CVE-2020-3593 | High | 7.8 | 2020-11-06 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vul… |
CVE-2020-3592 | Medium | 6.5 | 2020-11-06 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization an… |
CVE-2020-3591 | Medium | 4.3 | 2020-11-06 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-sit… |
CVE-2020-3590 | Medium | 6.4 | 2020-11-06 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-sit… |
CVE-2020-3588 | High | 7.3 | 2020-11-06 | A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a… |
CVE-2020-3587 | Medium | 6.4 | 2020-11-06 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-sit… |
CVE-2020-3579 | Medium | 6.1 | 2020-11-06 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site… |
CVE-2020-3574 | High | 7.5 | 2020-11-06 | A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop respon… |
CVE-2020-3573 | High | 7.8 | 2020-11-06 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary co… |
CVE-2020-3556 | High | 7.3 | 2020-11-06 | A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacke… |
CVE-2020-3551 | Medium | 6.1 | 2020-11-06 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cros… |
CVE-2020-3444 | High | 7.5 | 2020-11-06 | A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters… |
CVE-2020-3371 | Medium | 6.3 | 2020-11-06 | A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary code and execut… |
CVE-2020-3284 | Critical | 9.8 | 2020-11-06 | A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacke… |
CVE-2020-27129 | Medium | 6.7 | 2020-11-06 | A vulnerability in the remote management feature of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands and… |
CVE-2020-27128 | Medium | 6.5 | 2020-11-06 | A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an… |
CVE-2020-27123 | Medium | 5.5 | 2020-11-06 | A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local atta… |
CVE-2020-27122 | Medium | 6.7 | 2020-11-06 | A vulnerability in the Microsoft Active Directory integration of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to elevate p… |
CVE-2020-27121 | Medium | 4.3 | 2020-11-06 | A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software could allow an authenticated, remote attacker… |
CVE-2020-26086 | Medium | 4.3 | 2020-11-06 | A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, remote attacker to ga… |
CVE-2020-26084 | Medium | 6.5 | 2020-11-06 | A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on… |
CVE-2020-26083 | Medium | 4.8 | 2020-11-06 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative… |
CVE-2020-3599 | Medium | 6.1 | 2020-10-21 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to co… |
CVE-2020-3585 | Medium | 5.3 | 2020-10-21 | A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 10… |
CVE-2020-3583 | Medium | 6.1 | 2020-10-21 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software co… |
CVE-2020-3582 | Medium | 6.1 | 2020-10-21 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software co… |
CVE-2020-3581 | Medium | 6.1 | 2020-10-21 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software co… |
CVE-2020-3580 | Medium | 6.1 | 2020-10-21 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software co… |
CVE-2020-3578 | Medium | 5.3 | 2020-10-21 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2020-3577 | High | 7.4 | 2020-10-21 | A vulnerability in the ingress packet processing path of Cisco Firepower Threat Defense (FTD) Software for interfaces that are configured either as Inline Pair… |
CVE-2020-3572 | High | 8.6 | 2020-10-21 | A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allo… |
CVE-2020-3571 | High | 8.6 | 2020-10-21 | A vulnerability in the ICMP ingress packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 4110 appliances could allow an unaut… |
CVE-2020-3565 | Medium | 5.8 | 2020-10-21 | A vulnerability in the TCP Intercept functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass c… |
CVE-2020-3564 | Medium | 5.3 | 2020-10-21 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2020-3563 | High | 8.6 | 2020-10-21 | A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to caus… |
CVE-2020-3562 | High | 8.6 | 2020-10-21 | A vulnerability in the SSL/TLS inspection of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series firewalls could allow an unauthentic… |
CVE-2020-3561 | Medium | 4.7 | 2020-10-21 | A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… |
CVE-2020-3558 | Medium | 4.7 | 2020-10-21 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to re… |
CVE-2020-3557 | Medium | 5.3 | 2020-10-21 | A vulnerability in the host input API daemon of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a den… |
CVE-2020-3555 | Medium | 6.8 | 2020-10-21 | A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2020-3554 | High | 7.5 | 2020-10-21 | A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2020-3553 | Medium | 6.1 | 2020-10-21 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attac… |
CVE-2020-3550 | High | 8.1 | 2020-10-21 | A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authen… |
CVE-2020-3549 | High | 8.1 | 2020-10-21 | A vulnerability in the sftunnel functionality of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2020-3533 | High | 8.6 | 2020-10-21 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Firepower Threat Defense (FTD) Software could allow an unauthe… |
CVE-2020-3529 | High | 8.6 | 2020-10-21 | A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… |
CVE-2020-3528 | High | 8.6 | 2020-10-21 | A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Soft… |
CVE-2020-3515 | Medium | 6.1 | 2020-10-21 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attac… |
CVE-2020-3514 | High | 8.2 | 2020-10-21 | A vulnerability in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the conta… |
CVE-2020-3499 | High | 8.6 | 2020-10-21 | A vulnerability in the licensing service of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a denial… |
CVE-2020-3459 | High | 7.8 | 2020-10-21 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privile… |
CVE-2020-3458 | Medium | 6.7 | 2020-10-21 | Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software for the Fir… |
CVE-2020-3457 | Medium | 6.7 | 2020-10-21 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privile… |
CVE-2020-3456 | High | 8.8 | 2020-10-21 | A vulnerability in the Cisco Firepower Chassis Manager (FCM) of Cisco FXOS Software could allow an unauthenticated, remote attacker to conduct a cross-site req… |
CVE-2020-3455 | High | 7.8 | 2020-10-21 | A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms. The vulner… |
CVE-2020-3436 | High | 8.6 | 2020-10-21 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unaut… |
CVE-2020-3410 | High | 8.1 | 2020-10-21 | A vulnerability in the Common Access Card (CAC) authentication feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remo… |
CVE-2020-3373 | High | 8.6 | 2020-10-21 | A vulnerability in the IP fragment-handling implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Softwar… |
CVE-2020-3352 | Medium | 5.5 | 2020-10-21 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access hidden commands. The vulnera… |
CVE-2020-3317 | High | 7.5 | 2020-10-21 | A vulnerability in the ssl_inspection component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to crash Snort… |
CVE-2020-3304 | High | 8.6 | 2020-10-21 | A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthentic… |
CVE-2020-3299 | Medium | 5.8 | 2020-10-21 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configur… |
CVE-2020-3483 | High | 7.1 | 2020-10-14 | Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL certificates and private keys were not exc… |
CVE-2020-3427 | Medium | 6.6 | 2020-10-14 | The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the… |
CVE-2020-3602 | Medium | 6.3 | 2020-10-08 | A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privilege… |
CVE-2020-3601 | Medium | 4.4 | 2020-10-08 | A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privilege… |
CVE-2020-3598 | Medium | 6.5 | 2020-10-08 | A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to access confid… |
CVE-2020-3597 | Medium | 5.4 | 2020-10-08 | A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory… |
CVE-2020-3596 | Medium | 5.9 | 2020-10-08 | A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unau… |