Cisco 厂商相关 3252 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
思科是全球领先的网络设备与软件供应商,核心业务涵盖企业级路由、交换、无线及安全解决方案。其历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因配置错误或协议解析缺陷引发。值得关注的是,其安全架构持续演进,但近年来因供应链攻击及固件更新中的高危漏洞频发,引发业界对设备全生命周期管理的重视,凸显了复杂网络环境下的防御挑战。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-20353 | Cisco Catalyst Center 跨站脚本漏洞 — Cisco Digital Network Architecture Center (DNA Center)CWE-79 | 6.1 | Medium | 2025-11-13 |
| CVE-2025-20349 | Cisco Catalyst Center 操作系统命令注入漏洞 — Cisco Digital Network Architecture Center (DNA Center)CWE-78 | 6.3 | Medium | 2025-11-13 |
| CVE-2025-20341 | Cisco Catalyst Center Virtual Appliance 访问控制错误漏洞 — Cisco Digital Network Architecture Center (DNA Center)CWE-284 | 8.8 | High | 2025-11-13 |
| CVE-2025-20304 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine SoftwareCWE-79 | 5.4 | Medium | 2025-11-05 |
| CVE-2025-20305 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine SoftwareCWE-1220 | 4.3 | Medium | 2025-11-05 |
| CVE-2025-20289 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine SoftwareCWE-79 | 4.8 | Medium | 2025-11-05 |
| CVE-2025-20303 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine SoftwareCWE-79 | 5.4 | Medium | 2025-11-05 |
| CVE-2025-20377 | Cisco多款产品 信息泄露漏洞 — Cisco Packaged Contact Center EnterpriseCWE-200 | 4.3 | Medium | 2025-11-05 |
| CVE-2025-20375 | Cisco Unified Contact Center Express 代码问题漏洞 — Cisco Unified Contact Center ExpressCWE-434 | 6.5 | Medium | 2025-11-05 |
| CVE-2025-20376 | Cisco Unified Contact Center Express 代码问题漏洞 — Cisco Unified Contact Center ExpressCWE-434 | 6.5 | Medium | 2025-11-05 |
| CVE-2025-20374 | Cisco Unified Contact Center Express 路径遍历漏洞 — Cisco Unified Contact Center ExpressCWE-22 | 4.9 | Medium | 2025-11-05 |
| CVE-2025-20358 | Cisco Unified Contact Center Express 访问控制错误漏洞 — Cisco Unified Contact Center ExpressCWE-306 | 9.4 | Critical | 2025-11-05 |
| CVE-2025-20354 | Cisco Unified Contact Center Express 代码问题漏洞 — Cisco Unified Contact Center ExpressCWE-434 | 9.8 | Critical | 2025-11-05 |
| CVE-2025-20343 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine SoftwareCWE-697 | 8.6 | High | 2025-11-05 |
| CVE-2025-20360 | Cisco多款产品 安全漏洞 — Cisco Cyber VisionCWE-805 | 5.8 | Medium | 2025-10-15 |
| CVE-2025-20359 | Cisco IOS XE Software 安全漏洞 — Cisco Cyber VisionCWE-127 | 6.5 | Medium | 2025-10-15 |
| CVE-2025-20351 | Cisco SIP Software 跨站脚本漏洞 — Cisco Session Initiation Protocol (SIP) SoftwareCWE-79 | 6.1 | Medium | 2025-10-15 |
| CVE-2025-20350 | Cisco SIP Software 安全漏洞 — Cisco Session Initiation Protocol (SIP) SoftwareCWE-121 | 7.5 | High | 2025-10-15 |
| CVE-2025-20329 | Cisco TelePresence Collaboration Endpoint Software 日志信息泄露漏洞 — Cisco RoomOS SoftwareCWE-532 | 4.9 | Medium | 2025-10-15 |
| CVE-2025-20357 | Cisco Cyber Vision Center 跨站脚本漏洞 — Cisco Cyber VisionCWE-79 | 5.4 | Medium | 2025-10-01 |
| CVE-2025-20356 | Cisco Cyber Vision Center 跨站脚本漏洞 — Cisco Cyber VisionCWE-79 | 5.4 | Medium | 2025-10-01 |
| CVE-2025-20361 | Cisco Unified Communications Manager 跨站脚本漏洞 — Cisco Unified Communications ManagerCWE-79 | 4.8 | Medium | 2025-10-01 |
| CVE-2025-20363 | Cisco多款产品 安全漏洞 — IOSCWE-122 | 9.0 | Critical | 2025-09-25 |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareCWE-862 | 6.5 | Medium | 2025-09-25 |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareCWE-120 | 9.9 | Critical | 2025-09-25 |
| CVE-2025-20314 | Cisco IOS XE 安全漏洞 — Cisco IOS XE SoftwareCWE-232 | 6.7 | Medium | 2025-09-24 |
| CVE-2025-20316 | Cisco IOS XE 访问控制错误漏洞 — Cisco IOS XE SoftwareCWE-284 | 5.3 | Medium | 2025-09-24 |
| CVE-2025-20293 | Cisco IOS XE Software 安全漏洞 — Cisco IOS XE SoftwareCWE-459 | 5.3 | Medium | 2025-09-24 |
| CVE-2025-20338 | Cisco IOS XE 安全漏洞 — Cisco IOS XE SoftwareCWE-141 | 6.0 | Medium | 2025-09-24 |
| CVE-2025-20240 | Cisco IOS XE Software 安全漏洞 — Cisco IOS XE SoftwareCWE-692 | 6.1 | Medium | 2025-09-24 |
本页汇总了 Cisco 厂商截至目前公开的全部 3252 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。