Cisco 厂商相关 3365 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
思科是全球领先的网络设备与软件供应商,核心业务涵盖企业级路由、交换、无线及安全解决方案。其历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因配置错误或协议解析缺陷引发。值得关注的是,其安全架构持续演进,但近年来因供应链攻击及固件更新中的高危漏洞频发,引发业界对设备全生命周期管理的重视,凸显了复杂网络环境下的防御挑战。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-20133 | Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-401 | 8.6 | High | 2025-08-14 |
| CVE-2025-20215 | Cisco Webex Meetings 信任管理问题漏洞 — Cisco Webex Meetings CWE-295 | 5.4 | Medium | 2025-08-06 |
| CVE-2025-20332 | Cisco ISE 安全漏洞 — Cisco Identity Services Engine Software CWE-863 | 4.3 | Medium | 2025-08-06 |
| CVE-2025-20331 | Cisco ISE和Cisco ISE-PIC 安全漏洞 — Cisco Identity Services Engine Software CWE-80 | 5.4 | Medium | 2025-08-06 |
| CVE-2025-20337 | Cisco ISE和Cisco ISE-PIC 注入漏洞 — Cisco Identity Services Engine Software CWE-74 | 10.0 | Critical | 2025-07-16 |
| CVE-2025-20285 | Cisco ISE和Cisco ISE-PIC 安全漏洞 — Cisco Identity Services Engine Software CWE-302 | 4.1 | Medium | 2025-07-16 |
| CVE-2025-20288 | Cisco Unified Intelligence Center 代码问题漏洞 — Cisco Unified Contact Center Express CWE-918 | 5.8 | Medium | 2025-07-16 |
| CVE-2025-20284 | Cisco ISE和Cisco ISE-PIC 注入漏洞 — Cisco Identity Services Engine Software CWE-74 | 6.5 | Medium | 2025-07-16 |
| CVE-2025-20283 | Cisco ISE和Cisco ISE-PIC 注入漏洞 — Cisco Identity Services Engine Software CWE-74 | 6.5 | Medium | 2025-07-16 |
| CVE-2025-20274 | Cisco Unified Intelligence Center 代码问题漏洞 — Cisco Unified Contact Center Express CWE-434 | 6.3 | Medium | 2025-07-16 |
| CVE-2025-20272 | Cisco Evolved Programmable Network Manager和Cisco Prime Infrastructure SQL注入漏洞 — Cisco Evolved Programmable Network Manager (EPNM) CWE-89 | 4.3 | Medium | 2025-07-16 |
| CVE-2025-20309 | Cisco Unified Communications Manager 安全漏洞 — Cisco Unified Communications Manager CWE-798 | 10.0 | Critical | 2025-07-02 |
| CVE-2025-20307 | Cisco BroadWorks Application Delivery Platform 跨站脚本漏洞 — Cisco BroadWorks CWE-79 | 4.8 | Medium | 2025-07-02 |
| CVE-2025-20310 | Cisco Enterprise Chat and Email 跨站脚本漏洞 — Cisco Enterprise Chat and Email CWE-79 | 6.1 | Medium | 2025-07-02 |
| CVE-2025-20308 | Cisco Spaces Connector 操作系统命令注入漏洞 — Cisco DNA Spaces Connector CWE-78 | 6.0 | Medium | 2025-07-02 |
| CVE-2025-20282 | Cisco ISE和Cisco ISE-PIC 安全漏洞 — Cisco Identity Services Engine Software CWE-269 | 10.0 | Critical | 2025-06-25 |
| CVE-2025-20281 | Cisco ISE和Cisco ISE-PIC 注入漏洞 — Cisco Identity Services Engine Software CWE-74 | 10.0 | Critical | 2025-06-25 |
| CVE-2025-20264 | Cisco Identity Services Engine 授权问题漏洞 — Cisco Identity Services Engine Software CWE-285 | 6.4 | Medium | 2025-06-25 |
| CVE-2025-20260 | ClamAV 安全漏洞 — ClamAV CWE-122 | 9.8 | Critical | 2025-06-18 |
| CVE-2025-20271 | Cisco Meraki Z和Cisco Meraki MX 安全漏洞 — Cisco Meraki MX Firmware CWE-457 | 8.6 | High | 2025-06-18 |
| CVE-2025-20234 | ClamAV 缓冲区错误漏洞 — Cisco Secure Endpoint CWE-125 | 5.3 | Medium | 2025-06-18 |
| CVE-2025-20259 | Cisco ThousandEyes Endpoint Agent 路径遍历漏洞 — Cisco ThousandEyes Endpoint Agent CWE-22 | 5.3 | Medium | 2025-06-04 |
| CVE-2025-20286 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine Software CWE-259 | 9.9 | Critical | 2025-06-04 |
| CVE-2025-20278 | Cisco Unified Communications 命令注入漏洞 — Cisco Finesse CWE-77 | 6.0 | Medium | 2025-06-04 |
| CVE-2025-20279 | Cisco Unified CCX 跨站脚本漏洞 — Cisco Unified Contact Center Express CWE-79 | 4.8 | Medium | 2025-06-04 |
| CVE-2025-20277 | Cisco Unified CCX 路径遍历漏洞 — Cisco Unified Contact Center Express CWE-22 | 3.4 | Low | 2025-06-04 |
| CVE-2025-20275 | Cisco Unified Contact Center Express Editor 代码问题漏洞 — Cisco Unified Contact Center Express CWE-502 | 5.3 | Medium | 2025-06-04 |
| CVE-2025-20276 | Cisco Unified CCX 代码问题漏洞 — Cisco Unified Contact Center Express CWE-502 | 3.8 | Low | 2025-06-04 |
| CVE-2025-20273 | Cisco Unified Intelligent Contact Management Enterprise 跨站脚本漏洞 — Cisco Unified Intelligent Contact Management Enterprise CWE-79 | 6.1 | Medium | 2025-06-04 |
| CVE-2025-20261 | Cisco Integrated Management Controller 安全漏洞 — Cisco Unified Computing System (Managed) CWE-923 | 8.8 | High | 2025-06-04 |
本页汇总了 Cisco 厂商截至目前公开的全部 3365 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。