Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cisco — Vulnerabilities & Security Advisories 3365

Browse all 3365 CVE security advisories affecting Cisco. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Cisco Systems operates as a global leader in networking hardware, software, and telecommunications services, providing critical infrastructure for enterprise connectivity and cloud security. With over 3,000 recorded CVEs, the company’s attack surface is extensive, reflecting the complexity of its diverse product portfolio. Historically, vulnerabilities frequently involve remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from legacy protocols or complex configuration interfaces. Notable incidents include the 2023 supply chain compromise affecting the Cisco AnyConnect Secure Mobility Client, which allowed attackers to bypass authentication mechanisms. These breaches highlight risks associated with widely deployed endpoint security agents. The sheer volume of disclosed issues underscores the challenges inherent in maintaining security across such a vast ecosystem of interconnected devices and software solutions, requiring rigorous patch management and continuous monitoring to mitigate potential exploitation by threat actors targeting critical network infrastructure.

CVE ID Title CVSS Severity Published
CVE-2025-20173 Cisco IOS和Cisco IOS XE 安全漏洞 — IOS 7.7 High 2025-02-05
CVE-2025-20207 Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability — Cisco Secure Email CWE-200 4.3 Medium 2025-02-05
CVE-2025-20205 Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine Software CWE-79 4.8 Medium 2025-02-05
CVE-2025-20204 Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine Software CWE-79 4.8 Medium 2025-02-05
CVE-2025-20185 Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability — Cisco Secure Email CWE-250 3.4 Low 2025-02-05
CVE-2025-20184 Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability — Cisco Secure Email CWE-20 6.5 Medium 2025-02-05
CVE-2025-20183 Cisco Secure Web Appliance Range Request Bypass Vulnerability — Cisco Secure Web Appliance CWE-20 5.8 Medium 2025-02-05
CVE-2025-20180 Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability — Cisco Secure Email CWE-79 4.8 Medium 2025-02-05
CVE-2025-20179 Cisco Expressway Series Cross-Site Scripting Vulnerability — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-79 6.1 Medium 2025-02-05
CVE-2025-20125 Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability — Cisco Identity Services Engine Software CWE-285 9.1 Critical 2025-02-05
CVE-2025-20124 Cisco Identity Services Engine Java Deserialization Vulnerability — Cisco Identity Services Engine Software CWE-502 9.9 Critical 2025-02-05
CVE-2025-20165 Cisco BroadWorks SIP Denial of Service Vulnerability — Cisco BroadWorks CWE-789 7.5 High 2025-01-22
CVE-2025-20156 Cisco Meeting Management Client-Server Privilege Escalation Vulnerability — Cisco Meeting Management CWE-274 9.9 Critical 2025-01-22
CVE-2025-20128 ClamAV OLE2 File Format Decryption Denial of Service Vulnerability — Cisco Secure Endpoint CWE-122 5.3 Medium 2025-01-22
CVE-2025-20168 Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability — Cisco Common Services Platform Collector Software CWE-86 5.4 Medium 2025-01-08
CVE-2025-20167 Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability — Cisco Common Services Platform Collector Software CWE-86 5.4 Medium 2025-01-08
CVE-2025-20166 Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability — Cisco Common Services Platform Collector Software CWE-86 5.4 Medium 2025-01-08
CVE-2025-20126 Cisco ThousandEyes Endpoint Agent Certificate Validation Vulnerability — Cisco ThousandEyes Endpoint Agent CWE-295 4.8 Medium 2025-01-08
CVE-2025-20123 Cisco Crosswork Network Controller Stored Cross-Site Scripting Vulnerability — Cisco Crosswork Network Change Automation CWE-79 4.8 Medium 2025-01-08
CVE-2024-20397 Cisco NX-OS Software Image Verification Bypass Vulnerability — Cisco NX-OS Software CWE-284 5.2 Medium 2024-12-04
CVE-2020-26066 Cisco SD-WAN vManage Software XML External Entity Vulnerability — Cisco Catalyst SD-WAN Manager CWE-611 7.3 - 2024-11-18
CVE-2020-26067 Cisco Webex Teams Web Interface Cross-Site Scripting Vulnerability — Cisco Webex Teams CWE-80 5.4 Medium 2024-11-18
CVE-2020-26062 Cisco Integrated Management Controller Username Enumeration Vulnerability — Cisco Unified Computing System (Managed) CWE-203 5.3 Medium 2024-11-18
CVE-2020-26063 Cisco Integrated Management Controller Software Authorization Bypass Vulnerability — Cisco Unified Computing System (Managed) CWE-269 5.4 Medium 2024-11-18
CVE-2020-26071 Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability — Cisco Catalyst SD-WAN Manager CWE-22 8.4 High 2024-11-18
CVE-2020-27124 Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-457 8.6 High 2024-11-18
CVE-2020-3420 Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability — Cisco Unified Communications Manager CWE-79 5.4 - 2024-11-18
CVE-2020-3431 Cisco Small Business RV Series Routers Cross-Site Scripting Vulnerability — Cisco Small Business RV Series Router Firmware CWE-79 6.1 Medium 2024-11-18
CVE-2020-26073 Cisco SD-WAN vManage Directory Traversal Vulnerability — Cisco Catalyst SD-WAN Manager CWE-35 7.5 High 2024-11-18
CVE-2020-26074 Cisco SD-WAN vManage Privilege Escalation Vulnerability — Cisco Catalyst SD-WAN Manager CWE-250 7.8 High 2024-11-18

This page lists every published CVE security advisory associated with Cisco. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.