Vulnerabilidades em cisco
3.366 resultadosAnálise Vexday
A Cisco possui 2 CVEs registradas na base do Vexday, nenhuma delas sob ataque ativo no momento. Não há vulnerabilidades críticas ou publicações recentes (últimos 90 dias), indicando um panorama de risco baixo e estável. A fraqueza dominante identificada é CWE-122 (buffer overflow), mas sem evidências de exploração em campo.
CVE-2023-20091MEDIUMCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite VulnerabilityEPSS 0.2%CVE-2024-20320HIGHA vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers and Cisco Network Convergence System (NCS) EPSS 0.2%CVE-2024-20323HIGHA vulnerability in Cisco Intelligent Node (iNode) Software could allow an unauthenticated, remote attacker to hijack the TLS connection betwEPSS 0.2%CVE-2023-20004MEDIUMCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Write VulnerabilityEPSS 0.2%CVE-2026-20059MEDIUMCisco Unity Connection Reflected Cross-Site Scripting VulnerabilityEPSS 0.2%CVE-2026-20309MEDIUMCisco Identity Services Engine Cross-Site Scripting VulnerabilityEPSS 0.2%CVE-2026-20157HIGHCisco RoomOS Security Hardening Release - Missing Encryption VulnerabilitiesEPSS 0.2%CVE-2025-20181MEDIUMA vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, locEPSS 0.2%CVE-2020-26071HIGHCisco SD-WAN vEdge Arbitrary File Creation VulnerabilityEPSS 0.2%CVE-2026-20123MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect VulnerabilityEPSS 0.2%CVE-2024-20456MEDIUMA vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass theEPSS 0.2%CVE-2026-20290MEDIUMCisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service VulnerabilityEPSS 0.2%CVE-2025-20275MEDIUMCisco Unified Contact Center Express Editor Remote Code Execution VulnerabilityEPSS 0.2%CVE-2022-20929HIGHA vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticatedEPSS 0.2%CVE-2024-20306MEDIUMA vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker EPSS 0.2%CVE-2026-20063MEDIUMCisco Secure FTD Software Authenticated Command Injection VulnerabilityEPSS 0.2%CVE-2025-20117MEDIUMCisco Application Policy Infrastructure Controller Authenticated Command Injection VulnerabilityEPSS 0.2%CVE-2025-20185LOWCisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation VulnerabilityEPSS 0.2%CVE-2023-20274MEDIUMA vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges onEPSS 0.2%CVE-2025-20255MEDIUMA vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP reEPSS 0.2%