Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityKEVEPSS 35.1%Jul 29, 2026
- Medium6.5Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityKEVEPSS 28.2%Jun 15, 2026
- High7.8Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityKEVEPSS 25.3%Jun 4, 2026
- High8.6Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 88.2%Jun 3, 2026
- Critical10.0A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with t…EPSS 0.8%May 20, 2026
- Medium6.3A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated, remote attacker to execute arbitrary commands o…EPSS 0.4%May 20, 2026
- High7.2A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underl…EPSS 0.4%May 20, 2026
- Medium6.8A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX…EPSS 0.5%May 20, 2026
- High8.6A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that a…EPSS 1.1%May 14, 2026
- Medium5.4A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to mo…EPSS 0.2%May 14, 2026
- Medium5.4A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to el…EPSS 0.2%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityKEVEPSS 91.8%May 14, 2026
- Medium5.4A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and…EPSS 0.2%May 6, 2026
- Medium5.3A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to enumerate valid user accounts on an affected device.EPSS 0.3%May 6, 2026
- Medium4.3A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain unauthori…EPSS 0.2%May 6, 2026
- Medium4.3A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from…EPSS 0.2%May 6, 2026
- None0.0Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network Services O…EPSS 0.3%May 6, 2026
- High7.7A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG350) and Cisco 350X Series Stackable Managed Switche…EPSS 0.4%May 6, 2026
- Medium4.3A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct browser-based attacks.EPSS 0.1%May 6, 2026
- Medium6.4A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access f…EPSS 0.2%May 6, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve…EPSS 0.3%May 6, 2026
- High7.7A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a…EPSS 0.3%May 6, 2026
- High7.2A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device.EPSS 0.3%May 6, 2026
- High8.8A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device.EPSS 0.7%May 6, 2026
- Medium6.7An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central.Apr 28, 2026