Cisco 厂商相关 3366 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
思科是全球领先的网络设备与软件供应商,核心业务涵盖企业级路由、交换、无线及安全解决方案。其历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因配置错误或协议解析缺陷引发。值得关注的是,其安全架构持续演进,但近年来因供应链攻击及固件更新中的高危漏洞频发,引发业界对设备全生命周期管理的重视,凸显了复杂网络环境下的防御挑战。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-20062 | Cisco Unified Intelligence Center 代码问题漏洞 — Cisco Unified Intelligence Center CWE-200 | 6.5 | Medium | 2023-03-03 |
| CVE-2023-20069 | Cisco Prime Infrastructure 跨站脚本漏洞 — Cisco Prime Infrastructure CWE-79 | 5.4 | - | 2023-03-03 |
| CVE-2023-20078 | Cisco IP Phone 缓冲区错误漏洞 — Cisco IP Phones with Multiplatform Firmware CWE-121 | 9.8 | Critical | 2023-03-03 |
| CVE-2023-20079 | Cisco IP Phone 缓冲区错误漏洞 — Cisco IP Phones with Multiplatform Firmware CWE-121 | 9.8 | Critical | 2023-03-03 |
| CVE-2023-20088 | Cisco Finesse 授权问题漏洞 — Cisco Unified Contact Center Enterprise CWE-285 | 5.3 | Medium | 2023-03-03 |
| CVE-2023-20104 | Cisco Webex 跨站脚本漏洞 — Cisco Webex Teams CWE-79 | 6.1 | Medium | 2023-03-03 |
| CVE-2023-20011 | Cisco Application Policy Infrastructure Controller 跨站请求伪造漏洞 — Cisco Application Policy Infrastructure Controller (APIC) CWE-352 | 8.8 | High | 2023-02-23 |
| CVE-2023-20012 | Cisco Nexus 9300-FX3 Series 授权问题漏洞 — Cisco Unified Computing System (Managed) CWE-287 | 5.3 | Medium | 2023-02-23 |
| CVE-2023-20015 | Cisco Firepower 4100 Series和Cisco Firepower 9300 Security Appliance 操作系统命令注入漏洞 — Cisco Unified Computing System (Managed) CWE-78 | 6.0 | Medium | 2023-02-23 |
| CVE-2023-20016 | Cisco FXOS Software和UCS Manager 安全特征问题漏洞 — Cisco Unified Computing System (Managed) CWE-321 | 6.3 | Medium | 2023-02-23 |
| CVE-2023-20050 | Cisco NX-OS Software 操作系统命令注入漏洞 — Cisco NX-OS Software CWE-78 | 4.4 | Medium | 2023-02-23 |
| CVE-2023-20089 | Cisco Nexus 9000 Series Fabric Switches 安全漏洞 — Cisco NX-OS System Software in ACI Mode CWE-789 | 7.4 | High | 2023-02-23 |
| CVE-2022-20803 | ClamAV 资源管理错误漏洞 — ClamAV CWE-415 | 8.6 | High | 2023-02-17 |
| CVE-2023-25653 | jose 安全漏洞 — node-jose CWE-835 | 7.5 | High | 2023-02-16 |
| CVE-2023-20085 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine Software CWE-79 | 6.1 | Medium | 2023-02-16 |
| CVE-2023-20053 | Cisco Nexus Dashboard 跨站脚本漏洞 — Cisco Nexus Dashboard CWE-79 | 6.1 | Medium | 2023-02-16 |
| CVE-2022-20952 | Cisco Secure Web Appliance 输入验证错误漏洞 — Cisco Secure Web Appliance CWE-20 | 5.3 | Medium | 2023-02-16 |
| CVE-2023-20052 | ClamAV 安全漏洞 — Cisco Secure Endpoint CWE-611 | 5.3 | Medium | 2023-02-16 |
| CVE-2023-20075 | Cisco Secure Email 操作系统命令注入漏洞 — Cisco Secure Email CWE-77 | 6.0 | Medium | 2023-02-16 |
| CVE-2023-20009 | Cisco Secure Email 代码问题漏洞 — Cisco Secure Email CWE-20 | 6.5 | Medium | 2023-02-16 |
| CVE-2023-20014 | Cisco Nexus Dashboard 资源管理错误漏洞 — Cisco Nexus Dashboard CWE-399 | 7.5 | High | 2023-02-16 |
| CVE-2023-20032 | ClamAV 缓冲区错误漏洞 — Cisco Secure Web Appliance CWE-120 | 9.8 | Critical | 2023-02-16 |
| CVE-2023-20076 | Cisco Iox 操作系统命令注入漏洞 — Cisco IOS CWE-233 | 7.2 | High | 2023-02-12 |
| CVE-2023-20008 | Cisco TelePresence Collaboration Endpoint Software 安全漏洞 — Cisco RoomOS Software CWE-59 | 4.4 | Medium | 2023-01-19 |
| CVE-2023-20002 | Cisco TelePresence Collaboration Endpoint Software 代码问题漏洞 — Cisco RoomOS Software CWE-918 | 4.4 | Medium | 2023-01-19 |
| CVE-2023-20007 | Cisco Small Business RV340 和 RV345 操作系统命令注入漏洞 — Cisco Small Business RV Series Router Firmware CWE-120 | 4.7 | Medium | 2023-01-19 |
| CVE-2023-20045 | Cisco RV160和RV260 输入验证错误漏洞 — Cisco Small Business RV Series Router Firmware CWE-77 | 4.9 | Medium | 2023-01-19 |
| CVE-2023-20058 | Cisco Unified Intelligence Center 跨站脚本漏洞 — Cisco Unified Contact Center Enterprise CWE-79 | 6.1 | - | 2023-01-19 |
| CVE-2023-20019 | Cisco BroadWorks Application 跨站脚本漏洞 — Cisco BroadWorks CWE-79 | 6.1 | Medium | 2023-01-19 |
| CVE-2023-20040 | Cisco Network Services Orchestrator 代码问题漏洞 — Cisco Network Services Orchestrator CWE-23 | 5.5 | Medium | 2023-01-19 |
本页汇总了 Cisco 厂商截至目前公开的全部 3366 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。