Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
Cisco Modeling Labs External Authentication Bypass Vulnerability
CVEs:CVE-2023-20154
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-277905 | affected | Cisco | — | — |
Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities
CVEs:CVE-2023-20004CVE-2023-20090CVE-2023-20091CVE-2023-20092CVE-2023-20093CVE-2023-20094
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-265966 | affected | Cisco | — | — |
| CVRFPID-278404 | affected | Cisco | — | — |
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities
CVEs:CVE-2023-20117CVE-2023-20128
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-183630 | affected | Cisco | — | — |
Cisco Industrial Network Director Vulnerabilities
CVEs:CVE-2023-20036CVE-2023-20039
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-227667 | affected | Cisco | — | — |
Cisco Secure Network Analytics Remote Code Execution Vulnerability
CVEs:CVE-2023-20102
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-285963 | affected | Cisco | — | — |
Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability
CVEs:CVE-2023-20124
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-183630 | affected | Cisco | — | — |
Cisco BroadWorks Network Server TCP Denial of Service Vulnerability
CVEs:CVE-2023-20125
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-282087 | affected | Cisco | — | — |
Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities
CVEs:CVE-2023-20130CVE-2023-20129CVE-2023-20127CVE-2023-20131
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-190324 | affected | Cisco | — | — |
| CVRFPID-213688 | affected | Cisco | — | — |
Cisco Secure Network Analytics Remote Code Execution Vulnerability
CVEs:CVE-2023-20103
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-285963 | affected | Cisco | — | — |
Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability
CVEs:CVE-2023-20051
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-193199 | affected | Cisco | — | — |
Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability
CVEs:CVE-2023-20046
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-193199 | affected | Cisco | — | — |
| CVRFPID-292523 | affected | Cisco | — | — |
Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability
CVEs:CVE-2023-20060
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-203614 | affected | Cisco | — | — |
Cisco SD-WAN vManage Software Arbitrary File Deletion Vulnerability
CVEs:CVE-2023-20098
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-271450 | affected | Cisco | — | — |
Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability
CVEs:CVE-2023-20096
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-92631 | affected | Cisco | — | — |
Cisco Webex Meetings Web UI Vulnerabilities
CVEs:CVE-2023-20132CVE-2023-20134
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-228295 | affected | Cisco | — | — |
Cisco Identity Services Engine Command Injection Vulnerabilities
CVEs:CVE-2023-20152CVE-2023-20153
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-111903 | affected | Cisco | — | — |
Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities
CVEs:CVE-2023-20137CVE-2023-20138CVE-2023-20139CVE-2023-20140CVE-2023-20141CVE-2023-20142CVE-2023-20143CVE-2023-20144CVE-2023-20145CVE-2023-20146CVE-2023-20147CVE-2023-20148CVE-2023-20149CVE-2023-20150CVE-2023-20151
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-183630 | affected | Cisco | — | — |
Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability
CVEs:CVE-2023-20123
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-290489 | affected | Cisco | — | — |
Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities
CVEs:CVE-2023-20121CVE-2023-20122
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-111903 | affected | Cisco | — | — |
| CVRFPID-190324 | affected | Cisco | — | — |
| CVRFPID-213688 | affected | Cisco | — | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.