Cisco Security Advisories, Responses, and Notices

Home > Security Intelligence Operations > Latest Threat Information > Cisco Security Advisories, Responses, and Notices

Addressing security issues in Cisco products is the responsibility of the Cisco Product Security Incident Response Team (PSIRT). The Cisco PSIRT is a dedicated, global team that manages the receipt, investigation, and public reporting of security vulnerability information that is related to Cisco products and networks.

Please make a note of the Security Vulnerability Policy.

Cisco Security Advisories

Cisco Security Responses

Cisco Security Notices

Cisco Security Advisories

Cisco Security Advisories are published for significant security issues that directly involve Cisco products and require an upgrade, fix, or other customer action. In all security publications, Cisco discloses the minimum amount of information required for an end-user to assess the impact of a vulnerability and any potential steps needed to protect their environment. Cisco does not provide vulnerability details that could enable someone to craft an exploit. All security advisories on Cisco.com are displayed in chronological order, with the most recently updated advisory appearing at the top of the page.

Search All Security Resources

Keyword:

Date Range: Select a date range to restrict search to a specific time period.

Publication ID: Enter a Cisco publication identifier to search for a specific PSIRT document (Example: cisco-sa-20120530-iosxr).

Publication Date between: Enter a date range to restrict search to documents originally published in a specific time period.

and:

Last Updated between: Enter a date range to restrict search to documents last updated in a specific time period.

and:

Affected Product: Enter an affected product name to restrict search to documents associated with a particular product ID.

CVE ID:

Cisco Bug ID: Enter a Cisco Bug ID to restrict search to documents associated with a particular Cisco Bug ID.

Minimum CVSS Base Score: Enter a minimum CVSS Base Score to restrict search to documents associated with vulnerabilities with a certain Base CVSS Score or above.

Enter a minimum CVSS Base Score to restrict search to documents associated with vulnerabilities with a certain Base CVSS Score or above.

CVSS Base Score Parameters

Access Vector:

Access Complexity:

Authentication:

Confidentiality Impact:

Integrity Impact:

Availability Impact:

CVSS Temporal Score Parameters

Exploitability:

Remediation Level:

Report Confidence:

Advanced Search

Title

Version

First Published

Last Updated Sorted Descending

Related Resources

Cisco TelePresence Supervisor MSE 8050 Denial of Service Vulnerability New

1.0

2013 May 15
16:00 GMT

Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software Updated

1.1

2013 May 08
16:00 GMT

2013 May 10
19:30 GMT

Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability Updated

2.0

2012 October 31
16:00 GMT

2013 May 08
16:00 GMT

Multiple Vulnerabilities in Cisco Unified Computing System

1.1

2013 April 24
16:00 GMT

2013 April 30
14:19 GMT

Multiple Vulnerabilities in Cisco NX-OS-Based Products

1.2

2013 April 24
16:00 GMT

2013 April 26
19:40 GMT

Cisco Device Manager Command Execution Vulnerability New

1.0

2013 April 24
16:00 GMT

Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers

1.3

2013 April 15
16:00 GMT

2013 April 17
19:11 GMT

Cisco TelePresence Infrastructure Denial of Service Vulnerability

1.0

2013 April 17
16:00 GMT

Cisco Network Admission Control Manager SQL Injection Vulnerability

1.0

2013 April 17
16:00 GMT

Cisco IOS Software IP Service Level Agreement Vulnerability

1.3

2013 March 27
16:00 GMT

2013 April 12
14:44 GMT

Cisco IOS Software Network Address Translation Vulnerability

1.3

2013 March 27
16:00 GMT

2013 April 11
17:17 GMT

Cisco IOS Software Smart Install Denial of Service Vulnerability

1.3

2013 March 27
16:00 GMT

2013 April 11
15:42 GMT

Cisco IOS Software Zone-Based Policy Firewall Session Initiation Protocol Inspection Denial of Service Vulnerability

1.1

2013 March 27
16:00 GMT

2013 April 11
15:36 GMT

Cisco IOS Software Internet Key Exchange Vulnerability

1.1

2013 March 27
16:00 GMT

2013 April 11
15:30 GMT

Cisco IOS Software Protocol Translation Vulnerability

1.1

2013 March 27
16:00 GMT

2013 April 11
15:23 GMT

Cisco IOS Software Resource Reservation Protocol Denial of Service Vulnerability

1.2

2013 March 27
16:00 GMT

2013 April 11
15:00 GMT

Cisco Prime Network Control Systems Database Default Credentials Vulnerability

1.0

2013 April 10
16:00 GMT

Multiple Vulnerabilities in Cisco ASA Software

1.0

2013 April 10
16:00 GMT

Multiple Vulnerabilities in Cisco Firewall Services Module Software

1.0

2013 April 10
16:00 GMT

Multiple Vulnerabilities in Cisco Unified MeetingPlace Solution

1.0

2013 April 10
16:00 GMT

Items Per Page:

Showing 1-20 of 518 | < Previous Next >

Cisco Security Advisory

Cisco IPS Signature

Cisco Applied Mitigation Bulletin

Blog

Event Response

Alerts

These advisories are provided on an "as is" basis and do not imply any kind of guarantee or warranty. Your use of the information in the advisories or material linked from the advisories is at your own risk. Cisco reserves the right to change or update the advisories without notice at any time.

Cisco Security Responses

Cisco Security Responses are published to address less severe problems that affect network security or issues that require a response to information posted to a public discussion forum. They are normally published if a third party makes a public statement about a Cisco product vulnerability that Cisco has previously addressed through our standard disclosure process or when the nature of the issue does not warrant the visibility of a Cisco Security Advisory.

Search All Security Resources

Keyword:

Date Range: Select a date range to restrict search to a specific time period.

Publication ID: Enter a Cisco publication identifier to search for a specific PSIRT document (Example: cisco-sa-20120530-iosxr).

Publication Date between: Enter a date range to restrict search to documents originally published in a specific time period.

and:

Last Updated between: Enter a date range to restrict search to documents last updated in a specific time period.

and:

Affected Product: Enter an affected product name to restrict search to documents associated with a particular product ID.

CVE ID:

Cisco Bug ID: Enter a Cisco Bug ID to restrict search to documents associated with a particular Cisco Bug ID.

Minimum CVSS Base Score: Enter a minimum CVSS Base Score to restrict search to documents associated with vulnerabilities with a certain Base CVSS Score or above.

CVSS Base Score Parameters

Access Vector:

Access Complexity:

Authentication:

Confidentiality Impact:

Integrity Impact:

Availability Impact:

CVSS Temporal Score Parameters

Exploitability:

Remediation Level:

Report Confidence:

Advanced Search

Title

Version

First Published

Last Updated Sorted Descending

Related Resources

Cisco IOS and Cisco IOS XE Type 4 Passwords Issue

1.1

2013 March 18
16:00 GMT

2013 March 22
18:47 GMT

Cisco Nexus 1000V Series Switch Software Release 4.2(1)SV1(5.2) Virtual Security Gateway Bypass Issue

1.0

2012 November 07
16:00 GMT

Multiple Vulnerabilities in OpenSSL Library

1.9

2006 November 08
16:00 GMT

2012 October 15
13:20 GMT

Rootkits on Cisco IOS Devices

3.3

2008 May 16
16:00 GMT

2012 August 24
12:03 GMT

NACATTACK Presentation

2.0

2007 March 30
16:45 GMT

2012 May 09
17:33 GMT

Wi-Fi Protected Setup PIN Brute Force Vulnerability

4.0

2012 January 11
16:00 GMT

2012 February 29
20:15 GMT

Internet Key Exchange Resource Exhaustion Attack

2.4

2006 July 26
16:00 GMT

2011 October 18
14:39 GMT

Infected Cisco Information Packet and Warranty CDs

1.1

2011 August 03
16:00 GMT

Cisco IOS Software Denial of Service Vulnerabilities

1.1

2011 April 05
16:00 GMT

Cisco IPSec VPN Implementation Group Name Enumeration Vulnerability

1.1

2010 November 24
17:00 GMT

Cisco IronPort Desktop Flag Plug-in for Outlook Information Disclosure

1.1

2010 May 11
16:00 GMT

Unmatched Request Discloses Client Internal IP Address

1.0

2009 September 25
16:00 GMT

Cisco IOS Cross-Site Scripting Vulnerabilities

3.1

2009 June 19
16:00 GMT

Cisco Unified MeetingPlace Stored Cross-Site Scripting Vulnerability

1.0

2009 February 26
12:00 GMT

MD5 Hashes May Allow for Certificate Spoofing

1.0

2009 January 15
16:00 GMT

Cisco Response to TKIP Encryption Weakness

1.0

2008 November 21
16:00 GMT

Cisco VLAN Trunking Protocol Vulnerability

1.3

2008 November 05
16:00 GMT

Cisco Response to Outpost24 TCP State Table Manipulation Denial of Service Vulnerabilities

1.1

2008 October 17
16:00 GMT

VoIPshield Reported Vulnerabilities in Cisco Unity Server

1.1

2008 October 08
18:00 GMT

Cisco Secure ACS Denial Of Service Vulnerability

1.0

2008 September 03
16:00 GMT

Items Per Page:

Showing 1-20 of 64 | < Previous Next >

Cisco Security Advisory

Cisco IPS Signature

Cisco Applied Mitigation Bulletin

Blog

Event Response

Alerts

Cisco Security Notices

Cisco Security Notices document low- and medium-severity security issues that directly involve Cisco products but do not warrant the visibility of a Cisco Security Advisory. Cisco Security Notices are organized by Common Vulnerabilities and Exposures (CVE) Identifier to facilitate correlation of security issues across Cisco products. All Security Notices on Cisco.com are displayed in chronological order, with the most recently updated Security Notice appearing at the top of the page.

Search All Security Resources

Keyword:

Date Range: Select a date range to restrict search to a specific time period.

Publication ID: Enter a Cisco publication identifier to search for a specific PSIRT document (Example: cisco-sa-20120530-iosxr).

Publication Date between: Enter a date range to restrict search to documents originally published in a specific time period.

and:

Last Updated between: Enter a date range to restrict search to documents last updated in a specific time period.

and:

Affected Product: Enter an affected product name to restrict search to documents associated with a particular product ID.

CVE ID:

Cisco Bug ID: Enter a Cisco Bug ID to restrict search to documents associated with a particular Cisco Bug ID.

Minimum CVSS Base Score: Enter a minimum CVSS Base Score to restrict search to documents associated with vulnerabilities with a certain Base CVSS Score or above.

CVSS Base Score Parameters

Access Vector:

Access Complexity:

Authentication:

Confidentiality Impact:

Integrity Impact:

Availability Impact:

CVSS Temporal Score Parameters

Exploitability:

Remediation Level:

Report Confidence:

Advanced Search

Title

First Published

Last Updated Sorted Descending

Related Resources

WebEx Social Allows JavaScript URLs in Links Attached to Posts Updated

2013 May 14
21:14 GMT

2013 May 20
20:06 GMT

Cisco ACE Log Retention Denial of Service Vulnerability Updated

2013 May 14
10:49 GMT

2013 May 20
15:33 GMT

Cisco ASR Route Processor 2 Dynamic Multipoint Virtual Private Network Vulnerability Updated

2013 May 10
17:40 GMT

2013 May 17
12:09 GMT

Cisco Secure Access Control System Session Fixation Web Vulnerability New

2013 May 15
18:30 GMT

WebEx Social Client-Side Restriction Bypass Attribute Change Vulnerability New

2013 May 14
22:00 GMT

Cisco Unified Communications Manager Authentication Denial of Service New

2013 May 14
12:00 GMT

Cisco Unified Presence Memory Exhaustion Vulnerability Updated

2013 May 07
08:09 GMT

2013 May 09
21:36 GMT

Cisco ISM Malformed Authentication Header Packet Denial of Service Vulnerability Updated

2013 May 06
06:57 GMT

2013 May 07
17:34 GMT

Cisco WebEx Uninitialized Memory Read Vulnerability Updated

2013 May 03
16:00 GMT

2013 May 06
21:18 GMT

Cisco Wireless LAN Controller Telnet Denial of Service Vulnerability

2013 May 03
12:00 GMT

2013 May 03
17:44 GMT

Cisco Unified Communications Manager Arbitrary File Read Vulnerability New

2013 May 03
16:50 GMT

Cisco IOS XR Software Crafted SNMP Packets Denial of Service Vulnerability New

2013 April 30
05:02 GMT

2013 May 02
20:49 GMT

Cisco WebEx Cache Directory Read Vulnerability New

2013 May 02
16:21 GMT

Cisco Prime Central for Hosted Collaboration Solution ITM Java Servlet Container Cross-Site Scripting Vulnerability New

2013 April 30
20:00 GMT

2013 May 01
21:16 GMT

Cisco Prime Central for Hosted Collaboration Solution ITM Help Menus Cross-Site Scripting Vulnerability New

2013 April 30
20:00 GMT

2013 May 01
21:14 GMT

Cisco Prime Central for Hosted Collaboration Solution NCI Web Menus Cross-Site Scripting Vulnerability New

2013 April 30
20:00 GMT

2013 May 01
21:10 GMT

Cisco Prime Central for Hosted Collaboration Solution OpenView Web Menus Cross-Site Scripting Vulnerability New

2013 April 30
20:00 GMT

2013 May 01
21:03 GMT

Cisco Prime Central for Hosted Collaboration Solution Directory Traversal Vulnerability New

2013 April 30
20:00 GMT

2013 May 01
20:48 GMT

Cisco Unified Communications Domain Manager High CPU Utilization Vulnerability New

2013 April 30
09:55 GMT

Cisco TelePresence Management Suite SNMP Denial of Service Vulnerability New

2013 April 29
22:09 GMT

Items Per Page:

Showing 1-20 of 98 | < Previous Next >

Cisco Security Advisory

Cisco IPS Signature

Cisco Applied Mitigation Bulletin

Blog

Event Response

Alerts

Product Support

Product Categories

Downloads

Popular Downloads

Contact / Support Cases

Small Business

For Home

For Business

Training

Events

Certifications

Already a Partner?

Security Intelligence Operations

Cisco Security Advisories, Responses, and Notices

Cisco Security Advisories

Cisco Security Responses

Cisco Security Notices

Related Links

Tools

Products & Services

Solutions