Vendor advisories

Cisco Security Advisories

Browse 100 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Check delayed Checked 13 days ago Checked every 15 minutes

100 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Cisco Security Advisoriescisco-sa-ts-agent-fw-bypass-MYBTMrev
Medium

Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability

A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to u...

Vendor guidance

Cisco has released software updates that address this vulnerability.

Cisco Security Advisoriescisco-sa-roomos-infodisc-qBXjfmWm
Medium

Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enablin...

Vendor guidance

Cisco has released software updates that address this vulnerability.

Cisco Security Advisoriescisco-sa-cimc-xss-7EhBFxBp
Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validat...

Vendor guidance

Cisco has released software updates that address this vulnerability.

Cisco Security Advisoriescisco-sa-xe-webui-dos-PtAODAWW
Medium

Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error handling in the ...

Vendor guidance

Cisco has released software updates that address this vulnerability.

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources