← Back

Cisco

cisco

6,587 CVEs • 6,222 products

Products (6,222)

Click to collapse
Toggle
Ios
ios
Ios Xe
ios_xe
Nx Os
nx_os
Ios Xr
ios_xr
Asyncos
asyncos
Asa 5500
asa_5500
Jabber
jabber

CVEs (6,587)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cisco
13Tandberg 2000 Mxp
Tandberg 550 MxpTandberg 770 Mxp+10 more
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.1 HIGH· v2
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733.
1Cisco
13Tandberg 2000 Mxp
Tandberg 550 MxpTandberg 770 Mxp+10 more
May 6, 2026
May 2, 2014
N/A· v4
N/A· v3
7.1 HIGH· v2
Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.
1Cisco
1Webex Meetings Server
May 6, 2026
Apr 30, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777.
1Cisco
1Unified Communications Manager
May 6, 2026
Apr 29, 2014
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document,...Show more
The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374.Show less
1Cisco
1Unified Communications Manager
May 6, 2026
Apr 29, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The IP Manager Assistant (IPMA) component in Cisco Unified Communications Manager (Unified CM) allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352.
1Cisco
9Asr 1001
Asr 1002Asr 1002 X+6 more
May 6, 2026
Apr 29, 2014
N/A· v4
N/A· v3
6.3 MEDIUM· v2
The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.
1Cisco
1Adaptive Security Appliance Software
May 6, 2026
Apr 29, 2014
N/A· v4
N/A· v3
6.1 MEDIUM· v2
Cisco Adaptive Security Appliance (ASA) Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 packet, aka Bug ID CSCun45520.
1Cisco
2Unified Contact Center Enterprise
Unified Contact Center Express Editor Software
May 6, 2026
Apr 29, 2014
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request,...Show more
The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.Show less
1Cisco
9Asr 1001
Asr 1002Asr 1002 X+6 more
May 6, 2026
Apr 24, 2014
N/A· v4
N/A· v3
6.1 MEDIUM· v2
Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentatio...Show more
Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.Show less
1Cisco
1Ios
May 6, 2026
Apr 24, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a...Show more
Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682.Show less
1Cisco
1Adaptive Security Appliance Software
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (memory consumption and instability) via crafted SIP packets, aka Bug ID C...Show more
Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (memory consumption and instability) via crafted SIP packets, aka Bug ID CSCuf67469.Show less
1Cisco
1Ios
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Cisco IOS Unified Border Element (CUBE) in Cisco IOS before 15.3(2)T allows remote authenticated users to cause a denial of service (input queue wedge) via a crafted series of RTCP packets, aka Bug ID CSCuc42518.
1Cisco
5As5400 Universal Gateway
As5400hpx Universal GatewayAs5400xm Media Gateway+2 more
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in Cisco IOS before 15.3(2)T on AS5400 devices allows remote authenticated users to cause a denial of service (spurious errors) via unknown vectors, aka Bug ID CSCub61009.
1Cisco
1Ios
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
5.4 MEDIUM· v2
Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption) via VoIP traffic, aka Bug ID CSCub45809.
1Cisco
1Ios
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial of service (memory consumption) via vectors involving BGP path attributes, aka Bug ID CSCsw63003.
1Cisco
3Catalyst 6500
Catalyst 7600Ios
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
4.6 MEDIUM· v2
The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload) via a "no object-group" command followed by an object-group command,...Show more
The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload) via a "no object-group" command followed by an object-group command, aka Bug ID CSCts16133.Show less
1Cisco
1Ios
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service (memory consumption) via a sequence of VTY management sessions (aka exec sessions), aka Bug ID CSCtn43662.
1Cisco
1Ios
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
6.4 MEDIUM· v2
The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1)SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-...Show more
The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1)SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an arbitrary device to become a cluster member, aka Bug ID CSCub93641.Show less
1Cisco
8Asr 1001
Asr 1002Asr 1002 X+5 more
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268.
1Cisco
1Ios
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
6.3 MEDIUM· v2
Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and then placing this client into a (1) slow or (2) idle state, aka Bu...Show more
Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and then placing this client into a (1) slow or (2) idle state, aka Bug ID CSCto87436.Show less