Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cisco — Vulnerabilities & Security Advisories 3365

Browse all 3365 CVE security advisories affecting Cisco. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Cisco Systems operates as a global leader in networking hardware, software, and telecommunications services, providing critical infrastructure for enterprise connectivity and cloud security. With over 3,000 recorded CVEs, the company’s attack surface is extensive, reflecting the complexity of its diverse product portfolio. Historically, vulnerabilities frequently involve remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from legacy protocols or complex configuration interfaces. Notable incidents include the 2023 supply chain compromise affecting the Cisco AnyConnect Secure Mobility Client, which allowed attackers to bypass authentication mechanisms. These breaches highlight risks associated with widely deployed endpoint security agents. The sheer volume of disclosed issues underscores the challenges inherent in maintaining security across such a vast ecosystem of interconnected devices and software solutions, requiring rigorous patch management and continuous monitoring to mitigate potential exploitation by threat actors targeting critical network infrastructure.

CVE ID Title CVSS Severity Published
CVE-2025-20315 Cisco IOS XE 安全漏洞 — Cisco IOS XE Software CWE-805 8.6 High 2025-09-24
CVE-2025-20334 Cisco IOS XE 命令注入漏洞 — Cisco IOS XE Software CWE-77 8.8 High 2025-09-24
CVE-2025-20339 Cisco SD-WAN vEdge Software Access Control List Bypass Vulnerability — Cisco SD-WAN vEdge Cloud CWE-284 5.8 Medium 2025-09-24
CVE-2025-20365 Cisco Access Point Software 安全漏洞 — Cisco Aironet Access Point Software (IOS XE Controller) CWE-940 4.3 Medium 2025-09-24
CVE-2025-20364 Cisco Wireless LAN Controller 安全漏洞 — Cisco Aironet Access Point Software (IOS XE Controller) CWE-346 4.3 Medium 2025-09-24
CVE-2025-20340 Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability — Cisco IOS XR Software CWE-400 7.4 High 2025-09-10
CVE-2025-20159 Cisco IOS XR Software Management Interface ACL Bypass Vulnerability — Cisco IOS XR Software CWE-284 5.3 Medium 2025-09-10
CVE-2025-20248 Cisco IOS XR Software Image Verification Bypass Vulnerability — Cisco IOS XR Software CWE-347 6.0 Medium 2025-09-10
CVE-2025-20328 Cisco Webex Meetings 跨站脚本漏洞 — Cisco Webex Meetings CWE-79 5.4 Medium 2025-09-03
CVE-2025-20291 Cisco Webex Meetings 输入验证错误漏洞 — Cisco Webex Meetings CWE-601 4.3 Medium 2025-09-03
CVE-2025-20335 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Arbitrary File Write Vulnerability — Cisco Session Initiation Protocol (SIP) Software CWE-284 5.3 Medium 2025-09-03
CVE-2025-20336 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Disclosure Vulnerability — Cisco Session Initiation Protocol (SIP) Software CWE-200 5.3 Medium 2025-09-03
CVE-2025-20330 Cisco Unified Communications Manager IM and Presence Cross-Site Scripting Vulnerability — Cisco Unified Communications Manager IM and Presence Service CWE-79 6.1 Medium 2025-09-03
CVE-2025-20280 Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability — Cisco Evolved Programmable Network Manager (EPNM) CWE-79 4.8 Medium 2025-09-03
CVE-2025-20326 Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability — Cisco Unified Communications Manager CWE-352 4.3 Medium 2025-09-03
CVE-2025-20287 Cisco Evolved Programmable Network Manager Arbitrary File Upload Vulnerability — Cisco Evolved Programmable Network Manager (EPNM) CWE-434 4.3 Medium 2025-09-03
CVE-2025-20270 Cisco Evolved Programmable Network Manager Information Disclosure Vulnerability — Cisco Evolved Programmable Network Manager (EPNM) CWE-200 4.3 Medium 2025-09-03
CVE-2025-20241 Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol <TBD> Denial of Service Vulnerability — Cisco NX-OS Software CWE-733 7.4 High 2025-08-27
CVE-2025-20262 Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability — Cisco NX-OS Software CWE-476 5.0 Medium 2025-08-27
CVE-2025-20290 Cisco NXOS Software Sensitive Log Information Disclosure Vulnerability — Cisco NX-OS Software CWE-200 5.5 Medium 2025-08-27
CVE-2025-20292 Cisco NXOS Software Command Injection Vulnerability — Cisco NX-OS Software CWE-78 4.4 Medium 2025-08-27
CVE-2025-20295 Cisco UCS Manager Software Command Injection Vulnerability — Cisco Unified Computing System (Managed) CWE-78 6.0 Medium 2025-08-27
CVE-2025-20294 Cisco UCS Manager Software Command Injection Vulnerability — Cisco Unified Computing System (Managed) CWE-78 6.5 Medium 2025-08-27
CVE-2025-20342 Cisco Integrated Management Controller Virtual Keyboard Video Monitor (vKVM) Stored Cross-Site Scripting Vulnerability — Cisco Unified Computing System (Managed) CWE-80 5.4 Medium 2025-08-27
CVE-2025-20317 Cisco UCS Virtual Keyboard Video Monitor (vKVM) Open Redirect Vulnerability — Cisco Unified Computing System (Managed) CWE-601 7.1 High 2025-08-27
CVE-2025-20296 Cisco UCS Manager Software Stored Software Stored Cross-Site Scripting Vulnerability — Cisco Unified Computing System (Managed) CWE-79 5.4 - 2025-08-27
CVE-2025-20348 Cisco Nexus Dashboard Unauthorized REST API Vulnerability — Cisco Nexus Dashboard CWE-201 5.0 Medium 2025-08-27
CVE-2025-20347 Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability — Cisco Data Center Network Manager CWE-693 5.4 Medium 2025-08-27
CVE-2025-20344 Cisco Nexus Dashboard Path Traversal Vulnerability — Cisco Nexus Dashboard CWE-22 6.5 Medium 2025-08-27
CVE-2025-20345 Cisco Duo Authentication Proxy Information Disclosure Vulnerability — Cisco Duo Authentication Proxy CWE-200 4.9 Medium 2025-08-20

This page lists every published CVE security advisory associated with Cisco. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.