Cisco 厂商相关 3366 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
思科是全球领先的网络设备与软件供应商,核心业务涵盖企业级路由、交换、无线及安全解决方案。其历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因配置错误或协议解析缺陷引发。值得关注的是,其安全架构持续演进,但近年来因供应链攻击及固件更新中的高危漏洞频发,引发业界对设备全生命周期管理的重视,凸显了复杂网络环境下的防御挑战。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-20172 | Cisco IOS、Cisco IOS XE和Cisco IOS XR 安全漏洞 — IOS | 7.7 | High | 2025-02-05 |
| CVE-2025-20173 | Cisco IOS和Cisco IOS XE 安全漏洞 — IOS | 7.7 | High | 2025-02-05 |
| CVE-2025-20207 | Cisco多款产品 信息泄露漏洞 — Cisco Secure Email CWE-200 | 4.3 | Medium | 2025-02-05 |
| CVE-2025-20205 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine Software CWE-79 | 4.8 | Medium | 2025-02-05 |
| CVE-2025-20204 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine Software CWE-79 | 4.8 | Medium | 2025-02-05 |
| CVE-2025-20185 | Cisco AsyncOS 安全漏洞 — Cisco Secure Email CWE-250 | 3.4 | Low | 2025-02-05 |
| CVE-2025-20184 | Cisco AsyncOS 输入验证错误漏洞 — Cisco Secure Email CWE-20 | 6.5 | Medium | 2025-02-05 |
| CVE-2025-20183 | Cisco Secure Web Appliance 输入验证错误漏洞 — Cisco Secure Web Appliance CWE-20 | 5.8 | Medium | 2025-02-05 |
| CVE-2025-20180 | Cisco AsyncOS 跨站脚本漏洞 — Cisco Secure Email CWE-79 | 4.8 | Medium | 2025-02-05 |
| CVE-2025-20179 | Cisco Expressway Series 跨站脚本漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-79 | 6.1 | Medium | 2025-02-05 |
| CVE-2025-20125 | Cisco ISE 授权问题漏洞 — Cisco Identity Services Engine Software CWE-285 | 9.1 | Critical | 2025-02-05 |
| CVE-2025-20124 | Cisco ISE 代码问题漏洞 — Cisco Identity Services Engine Software CWE-502 | 9.9 | Critical | 2025-02-05 |
| CVE-2025-20165 | Cisco BroadWorks 代码问题漏洞 — Cisco BroadWorks CWE-789 | 7.5 | High | 2025-01-22 |
| CVE-2025-20156 | Cisco Meeting Management 安全漏洞 — Cisco Meeting Management CWE-274 | 9.9 | Critical | 2025-01-22 |
| CVE-2025-20128 | ClamAV 安全漏洞 — Cisco Secure Endpoint CWE-122 | 5.3 | Medium | 2025-01-22 |
| CVE-2025-20168 | Cisco Common Services Platform Collector 安全漏洞 — Cisco Common Services Platform Collector Software CWE-86 | 5.4 | Medium | 2025-01-08 |
| CVE-2025-20167 | Cisco Common Services Platform Collector 安全漏洞 — Cisco Common Services Platform Collector Software CWE-86 | 5.4 | Medium | 2025-01-08 |
| CVE-2025-20166 | Cisco Common Services Platform Collector 安全漏洞 — Cisco Common Services Platform Collector Software CWE-86 | 5.4 | Medium | 2025-01-08 |
| CVE-2025-20126 | Cisco ThousandEyes Endpoint Agent 信任管理问题漏洞 — Cisco ThousandEyes Endpoint Agent CWE-295 | 4.8 | Medium | 2025-01-08 |
| CVE-2025-20123 | Cisco Crosswork Network Controller 跨站脚本漏洞 — Cisco Crosswork Network Change Automation CWE-79 | 4.8 | Medium | 2025-01-08 |
| CVE-2024-20397 | Cisco NX-OS Software 访问控制错误漏洞 — Cisco NX-OS Software CWE-284 | 5.2 | Medium | 2024-12-04 |
| CVE-2020-26066 | Cisco SD-WAN vManage web UI 代码问题漏洞 — Cisco Catalyst SD-WAN Manager CWE-611 | 7.3 | - | 2024-11-18 |
| CVE-2020-26067 | Cisco?Webex Teams 跨站脚本漏洞 — Cisco Webex Teams CWE-80 | 5.4 | Medium | 2024-11-18 |
| CVE-2020-26062 | Cisco?Integrated Management Controller 安全漏洞 — Cisco Unified Computing System (Managed) CWE-203 | 5.3 | Medium | 2024-11-18 |
| CVE-2020-26063 | Cisco?Integrated Management Controller 授权问题漏洞 — Cisco Unified Computing System (Managed) CWE-269 | 5.4 | Medium | 2024-11-18 |
| CVE-2020-26071 | Cisco SD-WAN vEdge 路径遍历漏洞 — Cisco Catalyst SD-WAN Manager CWE-22 | 8.4 | High | 2024-11-18 |
| CVE-2020-27124 | Cisco ASA Software 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-457 | 8.6 | High | 2024-11-18 |
| CVE-2020-3420 | Cisco Unified Communications Manager和Session Management Edition 跨站脚本漏洞 — Cisco Unified Communications Manager CWE-79 | 5.4 | - | 2024-11-18 |
| CVE-2020-3431 | Cisco RV042 Dual WAN VPN Router和RV042G Dual Gigabit WAN VPN Router 跨站脚本漏洞 — Cisco Small Business RV Series Router Firmware CWE-79 | 6.1 | Medium | 2024-11-18 |
| CVE-2020-26073 | Cisco?SD-WAN vManage 信息泄露漏洞 — Cisco Catalyst SD-WAN Manager CWE-35 | 7.5 | High | 2024-11-18 |
本页汇总了 Cisco 厂商截至目前公开的全部 3366 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。