Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cisco — Vulnerabilities & Security Advisories 3365

Browse all 3365 CVE security advisories affecting Cisco. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Cisco Systems operates as a global leader in networking hardware, software, and telecommunications services, providing critical infrastructure for enterprise connectivity and cloud security. With over 3,000 recorded CVEs, the company’s attack surface is extensive, reflecting the complexity of its diverse product portfolio. Historically, vulnerabilities frequently involve remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from legacy protocols or complex configuration interfaces. Notable incidents include the 2023 supply chain compromise affecting the Cisco AnyConnect Secure Mobility Client, which allowed attackers to bypass authentication mechanisms. These breaches highlight risks associated with widely deployed endpoint security agents. The sheer volume of disclosed issues underscores the challenges inherent in maintaining security across such a vast ecosystem of interconnected devices and software solutions, requiring rigorous patch management and continuous monitoring to mitigate potential exploitation by threat actors targeting critical network infrastructure.

CVE ID Title CVSS Severity Published
CVE-2020-3525 Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability — Cisco Identity Services Engine Software CWE-200 4.9 - 2024-11-18
CVE-2020-3532 Cisco Unified Communications Products Cross-Site Scripting Vulnerability — Cisco Unity Connection CWE-79 6.1 - 2024-11-18
CVE-2020-3538 Cisco Data Center Network Manager Path Traversal Vulnerability — Cisco Data Center Network Manager CWE-20 4.6 Medium 2024-11-18
CVE-2020-3539 Cisco Data Center Network Manager Authorization Bypass Vulnerability — Cisco Data Center Network Manager CWE-285 6.3 Medium 2024-11-18
CVE-2020-3548 Cisco Email Security Appliance Denial Of Service Vulnerability — Cisco Secure Email CWE-407 5.3 Medium 2024-11-18
CVE-2021-1234 Cisco SD-WAN vManage Information Disclosure Vulnerabilities — Cisco Catalyst SD-WAN Manager CWE-497 5.3 Medium 2024-11-18
CVE-2021-1132 Cisco Network Services Orchestrator Path Traversal Vulnerability — Cisco Network Services Orchestrator CWE-35 5.3 Medium 2024-11-18
CVE-2021-1379 Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities — Cisco IP Phones with Multiplatform Firmware CWE-120 6.5 Medium 2024-11-18
CVE-2021-1285 Multiple Cisco Products SNORT Ethernet Frame Decoder Denial of Service Vulnerability — Cisco UTD SNORT IPS Engine Software CWE-770 7.4 - 2024-11-18
CVE-2021-1232 Cisco SD-WAN vManage Information Disclosure Vulnerability — Cisco Catalyst SD-WAN Manager CWE-522 6.5 Medium 2024-11-18
CVE-2021-1410 Cisco Webex Meetings Unauthorized Distribution List Update Vulnerability — Cisco Webex Meetings CWE-284 4.3 Medium 2024-11-18
CVE-2021-1425 Cisco Cisco Email Security Appliance and Content Security Management Appliance Information Disclosure Vulnerability — Cisco Secure Email and Web Manager CWE-201 4.3 Medium 2024-11-18
CVE-2021-1424 Cisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service Vulnerability — Cisco ASR 5000 Series Software CWE-119 5.3 Medium 2024-11-18
CVE-2021-1440 Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability — Cisco IOS XR Software CWE-617 6.8 Medium 2024-11-18
CVE-2021-1461 Cisco SD-WAN Software Signature Verification Bypass Vulnerability — Cisco Catalyst SD-WAN Manager CWE-347 4.9 Medium 2024-11-18
CVE-2021-1444 Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software Web Services Interface Cross-Site Scripting Vulnerability — Cisco Adaptive Security Appliance (ASA) Software CWE-79 6.1 Medium 2024-11-18
CVE-2021-1462 Cisco SD-WAN vManage Software Privilege Escalation Vulnerability — Cisco Catalyst SD-WAN Manager CWE-20 6.7 - 2024-11-18
CVE-2021-1465 Cisco?SD-WAN vManage Software 输入验证错误漏洞 — Cisco Catalyst SD-WAN Manager CWE-20 4.3 Medium 2024-11-18
CVE-2021-1466 Cisco SD-WAN vDaemon Buffer Overflow Vulnerability — Cisco Catalyst SD-WAN Manager CWE-20 5.4 Medium 2024-11-15
CVE-2021-1470 Cisco SD-WAN SQL Injection Vulnerability — Cisco Catalyst SD-WAN Manager CWE-20 4.9 Medium 2024-11-15
CVE-2021-1481 Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability — Cisco Catalyst SD-WAN Manager CWE-943 4.3 Medium 2024-11-15
CVE-2021-1482 Cisco SD-WAN vManage Authorization Bypass Vulnerability — Cisco Catalyst SD-WAN Manager CWE-20 6.4 Medium 2024-11-15
CVE-2021-1464 Cisco SD-WAN vManage Authorization Bypass Vulnerability — Cisco Catalyst SD-WAN Manager CWE-20 5.0 Medium 2024-11-15
CVE-2021-1483 Cisco SD-WAN vManage Software XML External Entity Vulnerability — Cisco Catalyst SD-WAN Manager CWE-611 6.4 Medium 2024-11-15
CVE-2021-1484 Cisco SD-WAN vManage Command Injection Vulnerability — Cisco Catalyst SD-WAN Manager CWE-88 6.5 Medium 2024-11-15
CVE-2021-1491 Cisco SD-WAN vManage Software Information Disclosure Vulnerability — Cisco Catalyst SD-WAN Manager CWE-59 6.5 - 2024-11-15
CVE-2021-1494 Snort 安全漏洞 — Cisco Firepower Threat Defense Software CWE-693 5.8 Medium 2024-11-15
CVE-2022-20633 Cisco Enterprise Chat and Email Username Enumeration Vulnerability — Cisco Enterprise Chat and Email CWE-204 5.3 Medium 2024-11-15
CVE-2022-20632 Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability — Cisco Enterprise Chat and Email CWE-79 6.1 Medium 2024-11-15
CVE-2021-34753 Cisco Firepower Threat Defense Ethernet Industrial Protocol Policy Bypass Vulnerabilities — Cisco Firepower Threat Defense Software CWE-284 5.8 Medium 2024-11-15

This page lists every published CVE security advisory associated with Cisco. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.