Cisco Enterprise Nfv Infrastructure Software (Cisco) - vulnerabilities (CVEs)

41 CVEs, 0 in the last 30 days, 79 known versions, newest CVE from 2026-09-08. Vendor: Cisco.

CVEs of Cisco Enterprise Nfv Infrastructure Software

CVE-2026-20293 - CVSS 7.1 (high), 2026-09-08: A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an…
CVE-2026-20288 - CVSS 6.5 (medium), 2026-08-05: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute…
CVE-2026-20198 - CVSS 4.8 (medium), 2026-08-05: A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct…
CVE-2026-20096 - CVSS 6.5 (medium), 2026-04-01: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform…
CVE-2026-20093 - CVSS 9.8 (critical), 2026-04-01: A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass…
CVE-2026-20095 - CVSS 6.5 (medium), 2026-04-01: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform…
CVE-2026-20090 - CVSS 4.8 (medium), 2026-04-01: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a…
CVE-2026-20088 - CVSS 4.8 (medium), 2026-04-01: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a…
CVE-2026-20089 - CVSS 4.8 (medium), 2026-04-01: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a…
CVE-2026-20087 - CVSS 4.8 (medium), 2026-04-01: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a…
CVE-2026-20085 - CVSS 6.1 (medium), 2026-04-01: A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a…
CVE-2022-20655 - CVSS 8.8 (high), 2024-11-15: A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection…
CVE-2022-20929 - CVSS 7.8 (high), 2023-03-10: A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local attacker…
CVE-2022-20779 - CVSS 9.9 (critical), 2022-05-04: Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the…
CVE-2022-20777 - CVSS 9.9 (critical), 2022-05-04: Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the…
CVE-2022-20780 - CVSS 9.9 (critical), 2022-05-04: Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the…
CVE-2021-34746 - CVSS 9.8 (critical), 2021-09-02: A vulnerability in the TACACS+ authentication, authorization and accounting (AAA) feature of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow…
CVE-2021-1421 - CVSS 7.8 (high), 2021-05-06: A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to perform a command injection attack on…
CVE-2021-1127 - CVSS 5.4 (medium), 2021-01-13: A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to…
CVE-2020-3478 - CVSS 8.1 (high), 2020-09-04: A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain…
CVE-2020-3365 - CVSS 6.5 (medium), 2020-09-04: A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform…
CVE-2020-3236 - CVSS 6.7 (medium), 2020-06-18: A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to gain root shell access to…
CVE-2019-1984 - CVSS 6.5 (medium), 2019-08-21: A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with…
CVE-2019-12623 - CVSS 4.3 (medium), 2019-08-21: A vulnerability in the web server functionality of Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an…
CVE-2019-1973 - CVSS 4.8 (medium), 2019-08-08: A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a…
CVE-2019-1972 - CVSS 6.7 (medium), 2019-08-08: A vulnerability the Cisco Enterprise NFV Infrastructure Software (NFVIS) restricted CLI could allow an authenticated, local attacker with valid…
CVE-2019-1971 - CVSS 9.8 (critical), 2019-08-08: A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command…
CVE-2019-1953 - CVSS 6.5 (medium), 2019-08-08: A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in…
CVE-2019-1961 - CVSS 4.9 (medium), 2019-08-08: A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the…
CVE-2019-1952 - CVSS 6.7 (medium), 2019-08-08: A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary…
CVE-2019-1960 - CVSS 4.4 (medium), 2019-08-08: Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the…
CVE-2019-1946 - CVSS 6.5 (medium), 2019-08-08: A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker…
CVE-2019-1959 - CVSS 4.4 (medium), 2019-08-08: Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the…
CVE-2019-1895 - CVSS 9.8 (critical), 2019-08-07: A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an…
CVE-2019-1894 - CVSS 7.2 (high), 2019-07-06: A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to…
CVE-2019-1893 - CVSS 7.8 (high), 2019-07-06: A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1656 - CVSS 5.3 (medium), 2019-01-24: A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to access the shell of the…
CVE-2018-15402 - CVSS 8.8 (high), 2018-10-17: A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery…
CVE-2018-0462 - CVSS 4.9 (medium), 2018-10-05: A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to…
CVE-2018-0460 - CVSS 6.5 (medium), 2018-10-05: A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read any file on an…
CVE-2018-0459 - CVSS 6.5 (medium), 2018-10-05: A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to…