Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2680▼ 660 respecto a la semana anterior
Críticas / altas1277▼ 279 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)228▼ 274 respecto a la semana anterior
7116 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (4.8) | 0.26% | — | Cisco Identity Services Engine | 21/5/2025 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based… | |
| Analizada | Media (5.4) | 0.29% | — | Cisco DUO | 21/5/2025 | 17/6/2026 | A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject arbitrary commands into emails that are sent by the service. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary commands into a… | |
| Analizada | Media (6.5) | 0.33% | — | Cisco Secure Network Analytics | 21/5/2025 | 17/6/2026 | A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with low privileges to generate fraudulent findings that are used to generate alarms and alerts on an affected product. Thi vulnerability is due… | |
| Analizada | Alta (7.2) | 0.58% | — | Cisco Secure Network Analytics | 21/5/2025 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system. | |
| Analizada | Media (4.3) | 0.19% | — | Cisco Webex Meetings | 21/5/2025 | 17/6/2026 | A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service. This vulnerability is due to improper handling of malicious HTTP requests to the affected service. An attacker could exploit this… | |
| Analizada | Media (6.1) | 0.30% | — | Cisco Webex Meetings | 21/5/2025 | 17/6/2026 | A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could… | |
| Analizada | Media (6.1) | 0.30% | — | Cisco Webex Meetings | 21/5/2025 | 17/6/2026 | A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could… | |
| Analizada | Media (6.1) | 0.30% | — | Cisco Webex Meetings | 21/5/2025 | 17/6/2026 | A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could… | |
| Analizada | Crítica (9.1) | 5.7% | — | Cisco Unified Contact Center Enterprise | 21/5/2025 | 17/6/2026 | A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this vulnerability by sending… | |
| Analizada | Alta (8.6) | 0.70% | — | Cisco Identity Services Engine | 21/5/2025 | 17/6/2026 | A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this… | |
| Analizada | Media (4.3) | 0.35% | — | Cisco Unified Intelligence CenterCisco Unified Contact Center Express | 21/5/2025 | 17/6/2026 | A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker could exploit this… | |
| Analizada | Alta (7.1) | 0.41% | — | Cisco Unified Intelligence CenterCisco Unified Contact Center Express | 21/5/2025 | 17/6/2026 | A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of user-supplied parameters in API or HTTP requests. An… | |
| Aplazada | Media (5.1) | 0.14% | — | Cisco Unified Communications AND Contact Center SolutionsAI | 21/5/2025 | 17/6/2026 | A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attacker could exploit… | |
| Analizada | Media (4.7) | 0.28% | — | Cisco Catalyst Center | 7/5/2025 | 17/6/2026 | A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that belongs to an internal service of an affected device. This vulnerability is due to insufficient enforcement of access control on HTTP requests. An attacker… | |
| Analizada | Crítica (9.1) | 0.52% | — | Cisco IOS XE | 7/5/2025 | 17/6/2026 | A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. This vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by… | |
| Analizada | Media (4.3) | 0.34% | — | Cisco Catalyst Sd-wan Manager | 7/5/2025 | 17/6/2026 | A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the web interface. An attacker could exploit… | |
| Analizada | Media (4.3) | 0.34% | — | Cisco IOS XE | 7/5/2025 | 17/6/2026 | A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access to configuration or operational data. This vulnerability exists because a subtle change in inner API call behavior causes results to be… | |
| Analizada | Media (5.5) | 0.17% | — | Cisco Catalyst Sd-wan Manager | 7/5/2025 | 17/6/2026 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials with CLI access on the… | |
| Analizada | Alta (7.3) | 0.41% | — | Cisco Catalyst Center | 7/5/2025 | 17/6/2026 | A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability is due to the lack of authentication in an API endpoint. An attacker could exploit this… | |
| Analizada | Alta (7.4) | 0.23% | — | Cisco IOS XE | 7/5/2025 | 17/6/2026 | A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of access point (AP) Cisco Discovery Protocol (CDP) neighbor reports when they… | |
| Analizada | Media (6.7) | 0.17% | — | Cisco IOS XE | 7/5/2025 | 17/6/2026 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An… | |
| Analizada | Alta (8.2) | 0.17% | — | Cisco IOS XE | 7/5/2025 | 17/6/2026 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An… | |
| Analizada | Alta (8.2) | 0.17% | — | Cisco IOS XE | 7/5/2025 | 17/6/2026 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An… | |
| Analizada | Alta (8.2) | 0.17% | — | Cisco IOS XE | 7/5/2025 | 17/6/2026 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An… | |
| Analizada | Alta (8.2) | 0.17% | — | Cisco IOS XE | 7/5/2025 | 17/6/2026 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An… |