https://www.cisco.com/c/it_it/support/security/vulnerability-management/products-maintenance-guides-list.html
Cisco Vulnerability Management (formerly Kenna Security) - Guide di manutenzione e funzionamento -...
Protezione Kenna - Alcuni collegamenti riportati di seguito possono aprire una nuova finestra del browser per visualizzare il documento selezionato.
cisco vulnerabilitykenna securitymanagementformerly
https://thehackernews.com/2025/07/critical-cisco-vulnerability-in-unified.html
Critical Cisco Vulnerability in Unified CM Grants Root Access via Static Credentials
CVE-2025-20309 in Cisco Unified CM could grant root access, allowing arbitrary command execution.
cisco vulnerabilityunified cm
https://www.cisco.com/c/it_it/support/security/vulnerability-management/tsd-products-support-design-technotes-list.html
Cisco Vulnerability Management (formerly Kenna Security) - Note tecniche per la progettazione -...
Protezione Kenna - Alcuni collegamenti riportati di seguito possono aprire una nuova finestra del browser per visualizzare il documento selezionato.
cisco vulnerabilitykenna securitynote tecnichemanagementformerly
https://www.cisco.com/c/nl_nl/support/security/vulnerability-management/products-implementation-design-guides-list.html
Cisco Vulnerability Management (formerly Kenna Security) - Ontwerphandleidingen - Cisco
Keniaanse beveiliging - Met sommige koppelingen wordt mogelijk een nieuw browser geopend om het geselecteerde document weer te geven.
cisco vulnerabilitykenna securitymanagementformerly
https://www.cisco.com/c/it_it/support/security/vulnerability-management/products-troubleshooting-guides-list.html
Cisco Vulnerability Management (formerly Kenna Security) - Guide alla risoluzione dei problemi -...
Protezione Kenna - Alcuni collegamenti riportati di seguito possono aprire una nuova finestra del browser per visualizzare il documento selezionato.
cisco vulnerabilitykenna securitymanagementformerly
https://www.cisco.com/c/pt_br/support/security/vulnerability-management/products-implementation-design-guides-list.html
Cisco Vulnerability Management (formerly Kenna Security) - Guias de Desenho - Cisco
Kenna Security - Alguns links abaixo podem abrir uma nova janela do navegador para exibir o documento selecionado.
cisco vulnerabilitykenna securitymanagementformerlyguias
https://www.cisco.com/c/nl_nl/support/security/vulnerability-management/tsd-products-support-design-technotes-list.html
Cisco Vulnerability Management (formerly Kenna Security) - TechNotes over ontwerpen - Cisco
Keniaanse beveiliging - Met sommige koppelingen wordt mogelijk een nieuw browser geopend om het geselecteerde document weer te geven.
cisco vulnerabilitykenna securitymanagementformerlytechnotes
https://www.cisco.com/c/it_it/support/security/vulnerability-management/products-tech-notes-list.html
Cisco Vulnerability Management (formerly Kenna Security) - Note tecniche per la risoluzione dei...
Protezione Kenna - Alcuni collegamenti riportati di seguito possono aprire una nuova finestra del browser per visualizzare il documento selezionato.
cisco vulnerabilitykenna security
https://www.cisco.com/c/nl_nl/support/security/vulnerability-management/products-tech-notes-list.html
Cisco Vulnerability Management (formerly Kenna Security) - TechNotes voor probleemoplossing - Cisco
Keniaanse beveiliging - Met sommige koppelingen wordt mogelijk een nieuw browser geopend om het geselecteerde document weer te geven.
cisco vulnerabilitykenna securitymanagementformerlytechnotes
https://www.cisco.com/c/en/us/support/security/vulnerability-management/series.html
Cisco Vulnerability Management (formerly Kenna Security) - Cisco
Kenna Security - Technical support documentation, downloads, tools and resources
cisco vulnerabilitymanagementformerlykennasecurity
https://www.cisco.com/c/en/us/products/collateral/security/vulnerability-management/kenna-vm-premier.html
Cisco Vulnerability Management Premier At-A-Glance - Cisco
Overview of the Cisco Vulnerability Management Premier tier
cisco vulnerabilitymanagementpremierglance
https://www.sentinelone.com/vulnerability-database/cve-2025-20243/
CVE-2025-20243: Cisco Secure Firewall ASA DoS Vulnerability
CVE-2025-20243 is a denial of service vulnerability in Cisco Secure Firewall ASA and FTD Software. Learn about its impact, affected versions, and mitigation.
cisco secure firewallcve2025asados
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-nxos-ether-dos-Kv8YNWZ4.html
Cisco Nexus 3600 and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability...
A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching...
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-vos-command-inject-65s2UCYy.html
Cisco Unified Communications Products Command Injection Vulnerability - Cisco
A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the...
cisco unified communicationscommand injectionproductsvulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-snort-ethernet-dos-HGXgJH8n.html
Multiple Cisco Products Snort Ethernet Frame Decoder Denial of Service Vulnerability - Cisco
Multiple Cisco products are affected by a vulnerability in the Ethernet Frame Decoder of the Snort detection engine that could allow an unauthenticated,...
denial of servicecisco productsethernet framemultiplesnort
https://www.sentinelone.com/vulnerability-database/cve-2026-20170/
CVE-2026-20170: Cisco Webex Contact Center XSS Vulnerability
CVE-2026-20170 is a cross-site scripting vulnerability in Cisco Webex Contact Center. Learn about its impact, affected versions, and mitigation methods.
cisco webex contact centercve2026xssvulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-voip-phone-flood-dos-YnU9EXOv.html
Cisco IP Phone TCP Packet Flood Denial of Service Vulnerability - Cisco
A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop...
cisco ip phonedenial of servicetcp packetfloodvulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20150128-ghost.html
GNU glibc gethostbyname Function Buffer Overflow Vulnerability - Cisco
On January 27, 2015, a buffer overflow vulnerability in the GNU C library (glibc) was publicly announced. This vulnerability is related to the various...
buffer overflow vulnerabilitygnu glibcgethostbynamefunctioncisco
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-aironetap-cmdinj-6bjT4FL8.html
Cisco Access Point Software Command Injection Vulnerability - Cisco
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root...
cisco access pointcommand injectionsoftwarevulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-imp-xss-QtT4VdsK.html
Cisco Unified Communications Products Cross-Site Scripting Vulnerability - Cisco
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition...
cisco unified communicationscross site scriptingproductsvulnerability
https://securityaffairs.com/59196/hacking/cisco-wannacry-vulnerability.html
CISCO start assessing its products against the WannaCry Vulnerability
May 17, 2017 - Tech giant Cisco announced an investigating on the potential impact of the WannaCry ransomware on its products. Let's hope other vendors will do the same.
against theciscostartassessingproducts
https://www.sentinelone.com/vulnerability-database/cve-2025-27091/
CVE-2025-27091: Cisco OpenH264 Buffer Overflow Vulnerability
CVE-2025-27091 is a buffer overflow vulnerability in Cisco OpenH264. Learn about its impact, affected versions, and mitigation methods.
buffer overflowcve2025ciscoopenh264
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-duo-win-bypass-pn42KKBm.html
Cisco Duo Authentication for Windows Logon and RDP Authentication Bypass Vulnerability - Cisco
A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and...
cisco duofor windowsauthenticationlogonrdp
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-snort3-ips-bypass-uE69KBMd.html
Multiple Cisco Products Snort 3 HTTP Intrusion Prevention System Rule Bypass Vulnerability - Cisco
Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote...
intrusion prevention systemcisco products
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20160302-cucdm.html
Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability - Cisco
A vulnerability in the web framework of Cisco Unified Communications Domain Manager (UCDM) Software could allow an unauthenticated, remote attacker to perform...
cisco unified communicationscross site scriptingdomain managervulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20180207-rv13x.html
Cisco RV132W and RV134W Remote Code Execution and Denial of Service Vulnerability - Cisco
A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote...
remote code executiondenial of servicecisco
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sna-xss-mCA9tQnJ.html
Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability -...
A vulnerability in the web-based management interface of the Network Diagrams application for Cisco Secure Network Analytics, formerly Stealthwatch Enterprise,...
cross site scriptingcisco securenetwork analyticsdiagramsapplication
https://www.sentinelone.com/vulnerability-database/cve-2025-20146/
CVE-2025-20146: Cisco IOS XR DoS Vulnerability
CVE-2025-20146 is a denial of service vulnerability in Cisco IOS XR Software. Learn about its impact, affected versions, and mitigation methods.
cisco ios xrcve2025dosvulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20190501-pnr-xss.html
Cisco Prime Network Registrar Cross-Site Scripting Vulnerability - Cisco
A vulnerability in the web-based management interface of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to conduct a cross-site...
cross site scriptingcisco primenetworkregistrarvulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sna-xss-NXOxDhRQ.html
Cisco Secure Network Analytics Cross-Site Scripting Vulnerability - Cisco
A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could allow an unauthenticated,...
cross site scriptingcisco securenetwork analyticsvulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-epni-arb-file-upload-jjdM2P83.html
Cisco Evolved Programmable Network Manager Arbitrary File Upload Vulnerability - Cisco
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to...
arbitrary file uploadnetwork managerciscoevolvedprogrammable
https://securityaffairs.com/68826/security/cisco-asa-flaw.html
For the second time CISCO issues security patch to fix a critical vulnerability in CISCO ASA
Feb 8, 2018 - Cisco has rolled out new security patches for a critical vulnerability, tracked as CVE-2018-0101, in its CISCO ASA (Adaptive Security Appliance) software.
for the second time
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-stealth-rce-BDwXFK9C.html
Cisco Secure Network Analytics Remote Code Execution Vulnerability - Cisco
A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device....
remote code executioncisco securenetwork analyticsvulnerability
https://www.techtarget.com/searchsecurity/answer/How-was-a-Cisco-firewall-vulnerability-exploited-by-threat-actors
How was a Cisco firewall vulnerability exploited by threat actors? | TechTarget
A vulnerability was recently confirmed within Cisco's firewall software and ASA device. Learn what this vulnerability is and how attackers exploited it.
cisco firewallby threat
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssh-m4UBdpE7.html
Cisco Unified Communications Manager Static SSH Credentials Vulnerability - Cisco
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could...
cisco unified communicationsssh credentialsmanagerstaticvulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-ucs-xss-Ey6XhyPS.html
Cisco UCS Manager Software Stored Cross-Site Scripting Vulnerability - Cisco
A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored...
cisco ucs managercross site scriptingsoftwarestoredvulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-scp-dos-duAdXtCg.html
Cisco IOS XE Software Secure Copy Protocol Server Denial of Service Vulnerability - Cisco
A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to...
cisco ios xesecure copy protocoldenial of service
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-ios-tacacs-hdB7thJw.html
Cisco IOS and IOS XE Software TACACS+ Authentication Bypass Vulnerability - Cisco
A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker...
cisco iosauthentication bypassxesoftwaretacacs
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-ap-ipv6-gw-tUAzpn9O.html
Cisco Access Point Software Intermittent IPv6 Gateway Change Vulnerability - Cisco
A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to...
cisco access pointsoftwareintermittentipv6gateway
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sdwan-maapi-privesc-KSUg7QSS.html
Cisco IOS XE SD-WAN Software Command Injection Vulnerability - Cisco
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with...
cisco ios xesd wancommand injectionsoftwarevulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-action-frame-inj-QqCNcz8H.html
Cisco Wireless Access Point Software Device Analytics Action Frame Injection Vulnerability - Cisco
A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker...
cisco wireless access pointdevice analyticsframe injectionsoftware
https://www.techtarget.com/searchsecurity/news/252484893/New-Cisco-WebEx-vulnerability-exposes-authentication-tokens
New Cisco Webex vulnerability exposes authentication tokens | TechTarget
Inspired by the recent surge in video conferencing and the fact that Cisco Webex is one of the most popular programs, Trustwave SpiderLabs researchers examined...
cisco webex vulnerabilityauthentication tokensnewexposestechtarget
https://www.itpro.com/security/cyber-attacks/cisco-asa-customers-urged-to-take-immediate-action-as-ncsc-cisa-issue-critical-vulnerability-warnings
Cisco ASA customers urged to take immediate action as NCSC, CISA issue critical vulnerability...
Sep 26, 2025 - Security agencies are warning that hackers are exploiting vulnerabilities in Cisco Adaptive Security Appliance (ASA) 5500-X Series devices to install malware.
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-ise-xxe-jWSbSDKt.html
Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability...
A vulnerability in the licensing features of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an...
xml external entityidentity servicesprocessing informationciscoengine
https://thehackernews.com/2023/09/cisco-warns-of-vulnerability-in-ios-and.html
Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts
Cisco discloses a new vulnerability (CVE-2023-20109) in IOS Software and IOS XE Software with the potential for remote code execution.
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-stealth-rce-2hYb9KFK.html
Cisco Secure Network Analytics Remote Code Execution Vulnerability - Cisco
A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, could allow an authenticated,...
remote code executioncisco securenetwork analyticsvulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-ise-file-upload-P4M8vwXY.html
Cisco Identity Services Engine Arbitrary File Upload Vulnerability - Cisco
A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote...
arbitrary file uploadidentity servicesciscoenginevulnerability
https://thehackernews.com/2024/02/cisa-warning-akira-ransomware.html?ref=secretciso.org
CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability
A critical vulnerability (CVE-2020-3259) in Cisco ASA and FTD software has been added to CISA's KEV catalog.
cisa warningakira ransomwarecisco asaexploitingftd
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-bw-priv-esc-qTgUZOsQ.html
Cisco BroadWorks Privilege Escalation Vulnerability - Cisco
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate...
cisco broadworksprivilege escalationvulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-broad-as-inf-disc-ZUXGFFXQ.html
Cisco BroadWorks Application Server Information Disclosure Vulnerability - Cisco
A vulnerability in the XSI-Actions interface of Cisco BroadWorks Application Server could allow an authenticated, remote attacker to access sensitive...
cisco broadworksapplication serverinformation disclosurevulnerability
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sdwan-utd-dos-hDATqxs.html
Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability - Cisco
A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode...
denial of servicecisco catalystsd wanroutersvulnerability
https://www.purevpn.com/blog/news/exploitation-of-unpatched-cisco-zero-day-vulnerability/
Breaking: Exploitation of Unpatched Cisco Zero-Day Vulnerability
Oct 17, 2023 - Stay informed about the critical, actively exploited security flaw impacting Cisco's IOS XE software (CVE-2023-20198). Discover the severity!
cisco zero daybreakingexploitationvulnerability
https://www.itnews.com.au/news/exploit-emerges-for-cisco-vpn-client-vulnerability-597204
Exploit emerges for Cisco VPN client vulnerability - iTnews
Arbitrary file deletion created privilege escalation vector.
cisco vpn clientexploitemergesvulnerabilityitnews