Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…EPSS 5.6%Apr 15, 2026
- Critical9.8A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersona…EPSS 0.5%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…EPSS 6.0%Apr 15, 2026
- Medium6.1A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks.EPSS 0.2%Apr 15, 2026
- Medium5.5A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the…EPSS 0.1%Apr 15, 2026
- Medium5.3A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypas…EPSS 0.3%Apr 15, 2026
- Medium4.9ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure VulnerabilityEPSS 6.5%Apr 15, 2026
- Critical9.9ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution VulnerabilityEPSS 10.4%Apr 15, 2026
- Medium6.0A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with…EPSS 0.5%Apr 15, 2026
- Medium4.8Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrativ…EPSS 0.2%Apr 15, 2026
- Medium6.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.EPSS 0.4%Apr 15, 2026
- Medium6.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.EPSS 0.4%Apr 15, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack agains…EPSS 0.2%Apr 15, 2026
- Medium4.7A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.EPSS 0.2%Apr 15, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack again…EPSS 0.2%Apr 15, 2026
- Medium4.9A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an affected system.EPSS 0.5%Apr 1, 2026
- Critical9.8A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying o…EPSS 0.9%Apr 1, 2026
- High8.0A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privi…EPSS 0.3%Apr 1, 2026
- High7.3A vulnerability in the web interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges on an af…EPSS 0.3%Apr 1, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code…EPSS 0.4%Apr 1, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injecti…EPSS 0.7%Apr 1, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injecti…EPSS 0.9%Apr 1, 2026
- High8.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection…EPSS 1.1%Apr 1, 2026
- Critical9.8A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authenti…EPSS 1.0%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…EPSS 0.2%Apr 1, 2026