Advisories
Cisco PSIRTActive exploitation (sightings)HIGH2024-01-24
Cisco Unified Communications Products Remote Code Execution Vulnerability
CVEs:CVE-2024-20253
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-189784 |
affected |
Cisco |
— |
— |
| CVRFPID-233658 |
affected |
Cisco |
— |
— |
| CVRFPID-244955 |
affected |
Cisco |
— |
— |
| CVRFPID-277610 |
affected |
Cisco |
— |
— |
| CVRFPID-73608 |
affected |
Cisco |
— |
— |
| CVRFPID-7500 |
affected |
Cisco |
— |
— |
| CVRFPID-88444 |
affected |
Cisco |
— |
— |
| CVRFPID-92631 |
affected |
Cisco |
— |
— |
Cisco PSIRTActive exploitation (sightings)HIGH2024-01-10
Cisco Unity Connection Unauthenticated Arbitrary File Upload Vulnerability
CVEs:CVE-2024-20272
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-73608 |
affected |
Cisco |
— |
— |
Cisco PSIRTActive exploitation (sightings)HIGH2024-01-10
Cisco WAP371 Wireless Access Point Command Injection Vulnerability
CVEs:CVE-2024-20287
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-280012 |
affected |
Cisco |
— |
— |
Cisco PSIRTActive exploitation (sightings)HIGH2024-01-10
Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability
CVEs:CVE-2024-20277
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-282176 |
affected |
Cisco |
— |
— |
Cisco PSIRTActive exploitation (sightings)HIGH2024-01-24
Cisco Small Business Series Switches Stacked Reload ACL Bypass Vulnerability
CVEs:CVE-2024-20263
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-278027 |
affected |
Cisco |
— |
— |
Cisco PSIRTActive exploitation (sightings)HIGH2024-01-10
Cisco TelePresence Management Suite Cross-Site Scripting Vulnerabilities
CVEs:CVE-2023-20249CVE-2023-20248
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-191859 |
affected |
Cisco |
— |
— |
Cisco PSIRTActive exploitation (sightings)HIGH2024-01-10
Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Stored Cross-Site Scripting Vulnerability
CVEs:CVE-2024-20270
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-282087 |
affected |
Cisco |
— |
— |
Cisco PSIRTActive exploitation (sightings)HIGH2024-01-10
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability
CVEs:CVE-2024-20251
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-111903 |
affected |
Cisco |
— |
— |
Cisco PSIRTActive exploitation (sightings)HIGH2024-01-24
Cisco Unity Connection Cross-Site Scripting Vulnerability
CVEs:CVE-2024-20305
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-73608 |
affected |
Cisco |
— |
— |
Cisco PSIRTCoalition ESS < 30%HIGH2024-01-10
Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Vulnerabilities
CVEs:CVE-2023-20257CVE-2023-20258CVE-2023-20260CVE-2023-20271
Affected products
| Product | Status | Vendor | Package | Ecosystem |
| CVRFPID-190324 |
affected |
Cisco |
— |
— |
| CVRFPID-213688 |
affected |
Cisco |
— |
— |