Vulnerabilidades em cisco
3.365 resultadosAnálise Vexday
A Cisco possui 2 CVEs registradas na base do Vexday, nenhuma delas sob ataque ativo no momento. Não há vulnerabilidades críticas ou publicações recentes (últimos 90 dias), indicando um panorama de risco baixo e estável. A fraqueza dominante identificada é CWE-122 (buffer overflow), mas sem evidências de exploração em campo.
CVE-2023-20117HIGHCisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection VulnerabilitiesEPSS 30.4%CVE-2019-1867CRITICALCisco Elastic Services Controller REST API Authentication Bypass VulnerabilityEPSS 30.3%CVE-2024-20337HIGHA vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriEPSS 29.9%CVE-2025-20393CRITICALCisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution VulnerabilityEPSS 29.9%KEVCVE-2019-1621HIGHCisco Data Center Network Manager Arbitrary File Download VulnerabilityEPSS 29.8%CVE-2023-20032CRITICALOn Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed:
A vulnerability in the HFS+ partition file pEPSS 29.3%CVE-2019-12650HIGHCisco IOS XE Software Web UI Command Injection VulnerabilitiesEPSS 28.9%CVE-2020-3153MEDIUMCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityEPSS 28.3%KEVCVE-2026-20262MEDIUMCisco Catalyst SD-WAN Manager Arbitrary File Write VulnerabilityEPSS 28.2%KEVCVE-2022-20759HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation VulnerabilityEPSS 28.2%CVE-2022-20966MEDIUMA vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conEPSS 27.6%CVE-2025-20282CRITICALCisco ISE API Unauthenticated Remote Code Execution VulnerabilityEPSS 27.5%CVE-2025-20188CRITICALA vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles featuresEPSS 27.1%CVE-2019-1913CRITICALCisco Small Business 220 Series Smart Switches Remote Code Execution VulnerabilitiesEPSS 25.9%CVE-2023-20269MEDIUMA vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTDEPSS 25.5%KEVCVE-2026-20245HIGHCisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityEPSS 25.3%KEVCVE-2019-1914HIGHCisco Small Business 220 Series Smart Switches Command Injection VulnerabilityEPSS 24.9%CVE-2026-20122MEDIUMCisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityEPSS 24.6%KEVCVE-2020-3249CRITICALMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataEPSS 23.6%CVE-2024-20404HIGHA vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF atEPSS 22.6%