Vulnerabilidades en Cisco

3365 resultados
Análisis Vexday

Com 3.204 CVEs catalogadas e 53 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração dos produtos Cisco está 3,7 vezes acima da média geral do catálogo, o que indica risco operacional significativamente elevado para organizações que dependem dessas tecnologias. Há ainda 199 vulnerabilidades de severidade crítica e 77 com prova de conceito pública disponível, ampliando a superfície de ataque explorável sem necessidade de capacidade ofensiva avançada. O tipo de falha mais recorrente é CWE-20 (validação de entrada inadequada), uma classe de vulnerabilidade frequentemente presente em componentes de rede e que tende a produzir impacto amplo quando explorada. A CVE mais perigosa em exploração ativa neste momento é CVE-2021-1498, com EPSS máximo de 1,0 — indicando probabilidade de exploração extremamente alta —, e deve ser tratada como prioridade imediata em qualquer processo de gestão de patches.

CVE-2022-20802MEDIUMCisco Enterprise Chat and Email Stored Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2023-20259HIGHA vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to causEPSS 0.6%CVE-2022-20939MEDIUMCisco Smart Software Manager On-Prem Privilege Escalation VulnerabilityEPSS 0.6%CVE-2019-1649MEDIUMCisco Secure Boot Hardware Tampering VulnerabilityEPSS 0.6%CVE-2021-34764MEDIUMCisco Firepower Management Center Software Cross-Site Scripting and Open Redirect VulnerabilitiesEPSS 0.6%CVE-2020-3207MEDIUMCisco IOS XE Software Command Injection VulnerabilityEPSS 0.6%CVE-2025-20340HIGHCisco IOS XR Address Resolution Protocol Broadcast Storm VulnerabilityEPSS 0.6%CVE-2024-20528LOWCisco Identity Services Engine Path Traversal VulnerabilityEPSS 0.6%CVE-2022-20965MEDIUMA vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to takEPSS 0.6%CVE-2019-1846HIGHCisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers MPLS OAM Denial of Service VulnerabilityEPSS 0.6%CVE-2019-1749HIGHCisco Aggregation Services Router 900 Route Switch Processor 3 OSPFv2 Denial of Service VulnerabilityEPSS 0.6%CVE-2023-20116MEDIUMA vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified CommuEPSS 0.6%CVE-2024-20255HIGHA vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated,EPSS 0.6%CVE-2022-20739HIGHCisco SD-WAN vManage Software Privilege Escalation VulnerabilityEPSS 0.6%CVE-2020-3308MEDIUMCisco Firepower Threat Defense Software Signature Verification Bypass VulnerabilityEPSS 0.6%CVE-2020-3380HIGHCisco Data Center Network Manager Privilege Escalation VulnerabilityEPSS 0.6%CVE-2019-1958MEDIUMCisco HyperFlex Software Cross-Site Request Forgery VulnerabilityEPSS 0.6%CVE-2021-1403HIGHCisco IOS XE Software Web UI Cross-Site WebSocket Hijacking VulnerabilityEPSS 0.6%CVE-2021-34784MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2021-1582MEDIUMCisco Application Policy Infrastructure Controller Stored Cross-Site Scripting VulnerabilityEPSS 0.6%