Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability
CVEs:CVE-2021-1566
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-189789 | affected | Cisco | — | — |
| CVRFPID-189790 | affected | Cisco | — | — |
Lasso SAML Implementation Vulnerability Affecting Cisco Products: June 2021
CVEs:CVE-2021-28091
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-189790 | affected | Cisco | — | — |
Cisco Small Business 220 Series Smart Switches Vulnerabilities
CVEs:CVE-2021-1541CVE-2021-1542CVE-2021-1543CVE-2021-1571
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-218878 | affected | Cisco | — | — |
| CVRFPID-278027 | affected | Cisco | — | — |
Cisco Common Services Platform Collector Command Injection Vulnerability
CVEs:CVE-2021-1538
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-257214 | affected | Cisco | — | — |
Cisco Meeting Server API Denial of Service Vulnerability
CVEs:CVE-2021-1524
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-217166 | affected | Cisco | — | — |
Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities
CVEs:CVE-2021-1539CVE-2021-1540
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-193199 | affected | Cisco | — | — |
Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability
CVEs:CVE-2021-1502
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-228295 | affected | Cisco | — | — |
| CVRFPID-278014 | affected | Cisco | — | — |
Cisco Webex Player Memory Corruption Vulnerability
CVEs:CVE-2021-1526
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-228295 | affected | Cisco | — | — |
| CVRFPID-278014 | affected | Cisco | — | — |
Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability
CVEs:CVE-2021-1503
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-228295 | affected | Cisco | — | — |
| CVRFPID-278014 | affected | Cisco | — | — |
Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerability
CVEs:CVE-2021-1517
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-190702 | affected | Cisco | — | — |
| CVRFPID-279336 | affected | Cisco | — | — |
Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability
CVEs:CVE-2021-1395
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-198393 | affected | Cisco | — | — |
| CVRFPID-92631 | affected | Cisco | — | — |
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
CVEs:CVE-2021-1570CVE-2021-1569
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-278016 | affected | Cisco | — | — |
Cisco Webex Meetings and Webex Meetings Server File Redirect Vulnerability
CVEs:CVE-2021-1525
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-190702 | affected | Cisco | — | — |
| CVRFPID-228295 | affected | Cisco | — | — |
Cisco DNA Center Certificate Validation Vulnerability
CVEs:CVE-2021-1134
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-233151 | affected | Cisco | — | — |
Cisco Webex Player Memory Corruption Vulnerability
CVEs:CVE-2021-1527
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-228295 | affected | Cisco | — | — |
| CVRFPID-278014 | affected | Cisco | — | — |
Cisco Video Surveillance 7000 Series IP Cameras Cisco Discovery Protocol and Link Layer Discovery Protocol Memory Leak Vulnerabilities
CVEs:CVE-2021-1564CVE-2021-1563
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-203888 | affected | Cisco | — | — |
Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability
CVEs:CVE-2021-1536
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-210403 | affected | Cisco | — | — |
| CVRFPID-278014 | affected | Cisco | — | — |
| CVRFPID-279336 | affected | Cisco | — | — |
Cisco SD-WAN Software Privilege Escalation Vulnerability
CVEs:CVE-2021-1528
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-238692 | affected | Cisco | — | — |
| CVRFPID-271450 | affected | Cisco | — | — |
| CVRFPID-278041 | affected | Cisco | — | — |
| CVRFPID-278078 | affected | Cisco | — | — |
| CVRFPID-278124 | affected | Cisco | — | — |
Cisco Webex Meetings Client Software Logging Information Disclosure Vulnerability
CVEs:CVE-2021-1544
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-228295 | affected | Cisco | — | — |
Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability
CVEs:CVE-2021-1568
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-109810 | affected | Cisco | — | — |
Cisco ThousandEyes Recorder Information Disclosure Vulnerability
CVEs:CVE-2021-1537
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-282176 | affected | Cisco | — | — |
Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability
CVEs:CVE-2021-1567
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-109810 | affected | Cisco | — | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.