To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities 05/Apr/2023 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability 15/Feb/2023

2024年9月13日 · On July 1, 2024, the Qualys Threat Research Unit (TRU) disclosed an unauthenticated, remote code execution vulnerability that affects the OpenSSH server (sshd) in glibc-based Linux systems.

2024年10月23日 · This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”).

Cisco ASA 5500-X Series Next-Generation Firewalls - Some links below may open a new browser window to display the document you selected.

2024年10月4日 · This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”).

2024年9月11日 · At the time of publication, this vulnerability affected Cisco IOS XR Software if it had Dedicated XML Agent enabled. For information about which Cisco software releases were vulnerable at the time of publication, see the Fixed Software section of this advisory. See the Details section in the bug ID(s) at the top of this advisory for the most complete and current …

2024年9月25日 · This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”).

2024年11月6日 · Multiple vulnerabilities in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.

On October 25, 2022, the OpenSSL project alerted the public to a high level security release scheduled for November 1, 2022. The full scope of the vulnerability is explained in the Talos blog and Cisco Security Advisory.