İçeriğe atla
Noroxi

Cisco kayıtları

cisco üreticisine ait 6.752 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
104 · %1,5
Silahlaştırılmış
151 · %2,2
Pre-auth RCE
648
Düzeltme kaydı olan
%1
Yayından KEV’e ortanca
996 gün

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

6.752 kayıt
  • CVE-2021-44228
    100Hemen

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %100

    apache · log4j10 Ara 2021

  • CVE-2023-20198
    100Hemen

    Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %100

    cisco · ios xe16 Eki 2023

  • CVE-2025-32433
    100Hemen

    Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99

    erlang · erlang\/otp16 Nis 2025

  • CVE-2021-1498
    99Hemen

    Cisco HyperFlex HX Command Injection Vulnerabilities

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    cisco · hyperflex hx data platform6 May 2021

  • CVE-2021-1497
    99Hemen

    Cisco HyperFlex HX Command Injection Vulnerabilities

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    cisco · hyperflex hx data platform6 May 2021

  • CVE-2022-22965
    99Hemen

    A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    vmware · spring framework1 Nis 2022

  • CVE-2018-0171
    99Hemen

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    cisco · ios28 Mar 2018

  • CVE-2017-3881
    99Hemen

    A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthe

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    cisco · ios17 Mar 2017

  • CVE-2025-20281
    99Hemen

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %98

    cisco · identity services engine25 Haz 2025

  • CVE-2024-20439
    98Hemen

    A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by us

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    cisco · smart license utility4 Eyl 2024

  • CVE-2026-20182
    97Hemen

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %92

    cisco · catalyst sd-wan manager14 May 2026

  • CVE-2026-20127
    97Hemen

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %88

    cisco · catalyst sd-wan manager25 Şub 2026

  • CVE-2026-20079
    96Hemen

    Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %88

    cisco · secure firewall management center4 Mar 2026

  • CVE-2020-3161
    94Hemen

    Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %84

    cisco · ip phone 8865 firmware15 Nis 2020

  • CVE-2017-9805
    92Hemen

    The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStrea

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %99

    apache · struts15 Eyl 2017

  • CVE-2016-6366
    91Hemen

    Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V,

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %88

    cisco · pix firewall software18 Ağu 2016

  • CVE-2022-20699
    91Hemen

    Cisco Small Business RV Series Routers Vulnerabilities

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %72

    cisco · rv340 firmware10 Şub 2022

  • CVE-2023-44487
    90Hemen

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100

    siemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware10 Eki 2023

  • CVE-2020-3452
    90Hemen

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100

    cisco · adaptive security appliance software22 Tem 2020

  • CVE-2018-0296
    90Hemen

    A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100

    cisco · adaptive security appliance software7 Haz 2018

  • CVE-2019-1653
    90Hemen

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100

    cisco · rv320 firmware24 Oca 2019

  • CVE-2026-20230
    90Hemen

    Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %88

    cisco · unified communications manager3 Haz 2026

  • CVE-2025-20362
    90Hemen

    Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FT

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %87

    cisco · adaptive security appliance software25 Eyl 2025

  • CVE-2025-20333
    90Hemen

    A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat D

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %71

    cisco · adaptive security appliance software25 Eyl 2025

  • CVE-2025-20337
    90Hemen

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %68

    cisco · identity services engine16 Tem 2025