# Cisco vulnerabilities

> Cisco has 6,360 published vulnerabilities across 6,582 products in our catalogue. 88 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is IOS, with 598. If you run Cisco software, patch the exploited flaws first.

Canonical page: https://www.edgeprotect.io/vendors/cisco

## At a glance

- **Published vulnerabilities:** 6,360
- **Known to be exploited:** 88
- **Products:** 6,582
- **Versions:** 34,538
- **Most recently added to the known-exploited list:** [CVE-2022-20775](https://www.edgeprotect.io/what-is/cve-2022-20775), 25 February 2026. We keep watching the list.

## Which Cisco products have the most vulnerabilities?

- [IOS](https://www.edgeprotect.io/product/cisco/ios): 598 published vulnerabilities, 8,443 versions
- [IOS XE](https://www.edgeprotect.io/product/cisco/ios_xe): 506 published vulnerabilities, 1,101 versions
- [Adaptive Security Appliance Software](https://www.edgeprotect.io/product/cisco/adaptive_security_appliance_software): 324 published vulnerabilities, 1,062 versions
- [NX-OS](https://www.edgeprotect.io/product/cisco/nx-os): 275 published vulnerabilities, 1,098 versions
- [Unified Communications Manager](https://www.edgeprotect.io/product/cisco/unified_communications_manager): 233 published vulnerabilities, 306 versions
- [Firepower Threat Defense](https://www.edgeprotect.io/product/cisco/firepower_threat_defense): 220 published vulnerabilities, 380 versions
- [IOS XR](https://www.edgeprotect.io/product/cisco/ios_xr): 188 published vulnerabilities, 320 versions
- [Identity Services Engine](https://www.edgeprotect.io/product/cisco/identity_services_engine): 149 published vulnerabilities, 111 versions
- [Webex Meetings Server](https://www.edgeprotect.io/product/cisco/webex_meetings_server): 136 published vulnerabilities, 63 versions
- [Firepower Management Center](https://www.edgeprotect.io/product/cisco/firepower_management_center): 130 published vulnerabilities, 207 versions

Each product page lists its own known-exploited flaws.

## Which Cisco vulnerabilities are being exploited?

88 flaws are on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2022-20775](https://www.edgeprotect.io/what-is/cve-2022-20775): Cisco SD-WAN Path Traversal Vulnerability. High, CVSS 7.8, chance of use in 30 days 12%, known exploited since 25 February 2026.
- [CVE-2025-20352](https://www.edgeprotect.io/what-is/cve-2025-20352): Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability. High, CVSS 7.7, chance of use in 30 days 38%, known exploited since 29 September 2025.
- [CVE-2025-20333](https://www.edgeprotect.io/what-is/cve-2025-20333): Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability. Critical, CVSS 9.9, chance of use in 30 days 40%, known exploited since 25 September 2025.
- [CVE-2025-20362](https://www.edgeprotect.io/what-is/cve-2025-20362): Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 86%, known exploited since 25 September 2025.
- [CVE-2025-20281](https://www.edgeprotect.io/what-is/cve-2025-20281): Cisco Identity Services Engine Injection Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 97%, known exploited since 28 July 2025.
- [CVE-2025-20337](https://www.edgeprotect.io/what-is/cve-2025-20337): Cisco Identity Services Engine Injection Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 65%, known exploited since 28 July 2025.
- [CVE-2025-32433](https://www.edgeprotect.io/what-is/cve-2025-32433): Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 98%, known exploited since 9 June 2025.
- [CVE-2024-20439](https://www.edgeprotect.io/what-is/cve-2024-20439): Cisco Smart Licensing Utility Static Credential Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 92%, known exploited since 31 March 2025.
- [CVE-2023-20118](https://www.edgeprotect.io/what-is/cve-2023-20118): Cisco Small Business RV Series Routers Command Injection Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 54%, known exploited since 3 March 2025.
- [CVE-2014-2120](https://www.edgeprotect.io/what-is/cve-2014-2120): Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability. Medium, CVSS 6.1, chance of use in 30 days 14%, known exploited since 12 November 2024.
- [CVE-2024-20481](https://www.edgeprotect.io/what-is/cve-2024-20481): Cisco ASA and FTD Denial-of-Service Vulnerability. Medium, CVSS 5.8, chance of use in 30 days 16%, known exploited since 24 October 2024.
- [CVE-2024-20399](https://www.edgeprotect.io/what-is/cve-2024-20399): Cisco NX-OS Command Injection Vulnerability. Medium, CVSS 6.0, chance of use in 30 days 4.3%, known exploited since 2 July 2024.
- [CVE-2024-20353](https://www.edgeprotect.io/what-is/cve-2024-20353): Cisco ASA and FTD Denial of Service Vulnerability. High, CVSS 8.6, chance of use in 30 days 63%, known exploited since 24 April 2024.
- [CVE-2024-20359](https://www.edgeprotect.io/what-is/cve-2024-20359): Cisco ASA and FTD Privilege Escalation Vulnerability. Medium, CVSS 6.0, chance of use in 30 days 17%, known exploited since 24 April 2024.
- [CVE-2020-3259](https://www.edgeprotect.io/what-is/cve-2020-3259): Cisco ASA and FTD Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days 72%, known exploited since 15 February 2024.
- [CVE-2023-20273](https://www.edgeprotect.io/what-is/cve-2023-20273): Cisco IOS XE Web UI Command Injection Vulnerability. High, CVSS 7.2, chance of use in 30 days 90%, known exploited since 23 October 2023.
- [CVE-2021-1435](https://www.edgeprotect.io/what-is/cve-2021-1435): Cisco IOS XE Web UI Command Injection Vulnerability. High, CVSS 7.2, chance of use in 30 days 7.9%, known exploited since 19 October 2023.
- [CVE-2023-20198](https://www.edgeprotect.io/what-is/cve-2023-20198): Cisco IOS XE Web UI Privilege Escalation Vulnerability. Critical, CVSS 10.0, chance of use in 30 days >99%, known exploited since 16 October 2023.
- [CVE-2023-44487](https://www.edgeprotect.io/what-is/cve-2023-44487): HTTP/2 Rapid Reset Attack Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 10 October 2023.
- [CVE-2023-20109](https://www.edgeprotect.io/what-is/cve-2023-20109): Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability. Medium, CVSS 6.6, chance of use in 30 days 2.3%, known exploited since 10 October 2023.
- [CVE-2023-20269](https://www.edgeprotect.io/what-is/cve-2023-20269): Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability. Medium, CVSS 5.0, chance of use in 30 days 22%, known exploited since 13 September 2023.
- [CVE-2016-6415](https://www.edgeprotect.io/what-is/cve-2016-6415): Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days 88%, known exploited since 19 May 2023.
- [CVE-2004-1464](https://www.edgeprotect.io/what-is/cve-2004-1464): Cisco IOS Denial-of-Service Vulnerability. Medium, CVSS 5.9, chance of use in 30 days 5.1%, known exploited since 19 May 2023.
- [CVE-2017-6742](https://www.edgeprotect.io/what-is/cve-2017-6742): Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 21%, known exploited since 19 April 2023.
- [CVE-2020-3433](https://www.edgeprotect.io/what-is/cve-2020-3433): Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability. High, CVSS 7.8, chance of use in 30 days 10%, known exploited since 24 October 2022.
- [CVE-2020-3153](https://www.edgeprotect.io/what-is/cve-2020-3153): Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 28%, known exploited since 24 October 2022.
- [CVE-2019-15271](https://www.edgeprotect.io/what-is/cve-2019-15271): Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability. High, CVSS 8.8, chance of use in 30 days 6.0%, known exploited since 8 June 2022.
- [CVE-2016-6366](https://www.edgeprotect.io/what-is/cve-2016-6366): Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 88%, known exploited since 24 May 2022.
- [CVE-2016-6367](https://www.edgeprotect.io/what-is/cve-2016-6367): Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 23%, known exploited since 24 May 2022.
- [CVE-2022-20821](https://www.edgeprotect.io/what-is/cve-2022-20821): Cisco IOS XR Open Port Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 12%, known exploited since 23 May 2022.
- [CVE-2022-22965](https://www.edgeprotect.io/what-is/cve-2022-22965): Spring Framework JDK 9+ Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 4 April 2022.
- [CVE-2018-0147](https://www.edgeprotect.io/what-is/cve-2018-0147): Cisco Secure Access Control System Java Deserialization Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 19%, known exploited since 25 March 2022.
- [CVE-2018-0125](https://www.edgeprotect.io/what-is/cve-2018-0125): Cisco VPN Routers Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 55%, known exploited since 25 March 2022.
- [CVE-2017-3881](https://www.edgeprotect.io/what-is/cve-2017-3881): Cisco IOS and IOS XE Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 99%, known exploited since 25 March 2022.
- [CVE-2010-3035](https://www.edgeprotect.io/what-is/cve-2010-3035): Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 5.6%, known exploited since 25 March 2022.
- [CVE-2015-0666](https://www.edgeprotect.io/what-is/cve-2015-0666): Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 41%, known exploited since 25 March 2022.
- [CVE-2009-2055](https://www.edgeprotect.io/what-is/cve-2009-2055): Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability. Medium, CVSS 5.9, chance of use in 30 days 3.3%, known exploited since 25 March 2022.
- [CVE-2022-20703](https://www.edgeprotect.io/what-is/cve-2022-20703): Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 9.2%, known exploited since 3 March 2022.
- [CVE-2022-20701](https://www.edgeprotect.io/what-is/cve-2022-20701): Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 9.7%, known exploited since 3 March 2022.
- [CVE-2022-20699](https://www.edgeprotect.io/what-is/cve-2022-20699): Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 72%, known exploited since 3 March 2022.
- [CVE-2022-20700](https://www.edgeprotect.io/what-is/cve-2022-20700): Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 5.7%, known exploited since 3 March 2022.
- [CVE-2022-20708](https://www.edgeprotect.io/what-is/cve-2022-20708): Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 15%, known exploited since 3 March 2022.
- [CVE-2017-12240](https://www.edgeprotect.io/what-is/cve-2017-12240): Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 14%, known exploited since 3 March 2022.
- [CVE-2018-0151](https://www.edgeprotect.io/what-is/cve-2018-0151): Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 14%, known exploited since 3 March 2022.
- [CVE-2017-6738](https://www.edgeprotect.io/what-is/cve-2017-6738): Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 11%, known exploited since 3 March 2022.
- [CVE-2017-6736](https://www.edgeprotect.io/what-is/cve-2017-6736): Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 71%, known exploited since 3 March 2022.
- [CVE-2017-6737](https://www.edgeprotect.io/what-is/cve-2017-6737): Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 43%, known exploited since 3 March 2022.
- [CVE-2017-6739](https://www.edgeprotect.io/what-is/cve-2017-6739): Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 11%, known exploited since 3 March 2022.
- [CVE-2017-6740](https://www.edgeprotect.io/what-is/cve-2017-6740): Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 11%, known exploited since 3 March 2022.
- [CVE-2017-6743](https://www.edgeprotect.io/what-is/cve-2017-6743): Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 11%, known exploited since 3 March 2022.
- [CVE-2017-6744](https://www.edgeprotect.io/what-is/cve-2017-6744): Cisco IOS Software SNMP Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 7.2%, known exploited since 3 March 2022.
- [CVE-2018-0167](https://www.edgeprotect.io/what-is/cve-2018-0167): Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 3.4%, known exploited since 3 March 2022.
- [CVE-2018-0158](https://www.edgeprotect.io/what-is/cve-2018-0158): Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability. High, CVSS 8.6, chance of use in 30 days 7.2%, known exploited since 3 March 2022.
- [CVE-2018-0172](https://www.edgeprotect.io/what-is/cve-2018-0172): Cisco IOS and IOS XE Software Improper Input Validation Vulnerability. High, CVSS 8.6, chance of use in 30 days 7.8%, known exploited since 3 March 2022.
- [CVE-2018-0155](https://www.edgeprotect.io/what-is/cve-2018-0155): Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability. High, CVSS 8.6, chance of use in 30 days 7.7%, known exploited since 3 March 2022.
- [CVE-2018-0173](https://www.edgeprotect.io/what-is/cve-2018-0173): Cisco IOS and IOS XE Software Improper Input Validation Vulnerability. High, CVSS 8.6, chance of use in 30 days 7.6%, known exploited since 3 March 2022.
- [CVE-2018-0174](https://www.edgeprotect.io/what-is/cve-2018-0174): Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability. High, CVSS 8.6, chance of use in 30 days 7.6%, known exploited since 3 March 2022.
- [CVE-2018-0175](https://www.edgeprotect.io/what-is/cve-2018-0175): Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability. High, CVSS 8.0, chance of use in 30 days 3.6%, known exploited since 3 March 2022.
- [CVE-2018-0154](https://www.edgeprotect.io/what-is/cve-2018-0154): Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 7.1%, known exploited since 3 March 2022.
- [CVE-2017-6627](https://www.edgeprotect.io/what-is/cve-2017-6627): Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 6.0%, known exploited since 3 March 2022.
- [CVE-2017-12234](https://www.edgeprotect.io/what-is/cve-2017-12234): Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 6.9%, known exploited since 3 March 2022.
- [CVE-2017-12235](https://www.edgeprotect.io/what-is/cve-2017-12235): Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 6.9%, known exploited since 3 March 2022.
- [CVE-2017-12237](https://www.edgeprotect.io/what-is/cve-2017-12237): Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 6.9%, known exploited since 3 March 2022.
- [CVE-2017-12231](https://www.edgeprotect.io/what-is/cve-2017-12231): Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 6.9%, known exploited since 3 March 2022.
- [CVE-2017-12233](https://www.edgeprotect.io/what-is/cve-2017-12233): Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 6.9%, known exploited since 3 March 2022.
- [CVE-2018-0159](https://www.edgeprotect.io/what-is/cve-2018-0159): Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 6.9%, known exploited since 3 March 2022.
- [CVE-2018-0156](https://www.edgeprotect.io/what-is/cve-2018-0156): Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 8.4%, known exploited since 3 March 2022.
- [CVE-2019-1652](https://www.edgeprotect.io/what-is/cve-2019-1652): Cisco Small Business Routers Improper Input Validation Vulnerability. High, CVSS 7.2, chance of use in 30 days 96%, known exploited since 3 March 2022.
- [CVE-2017-12238](https://www.edgeprotect.io/what-is/cve-2017-12238): Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 2.0%, known exploited since 3 March 2022.
- [CVE-2017-12232](https://www.edgeprotect.io/what-is/cve-2017-12232): Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 2.2%, known exploited since 3 March 2022.
- [CVE-2017-6663](https://www.edgeprotect.io/what-is/cve-2017-6663): Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 2.1%, known exploited since 3 March 2022.
- [CVE-2018-0161](https://www.edgeprotect.io/what-is/cve-2018-0161): Cisco IOS Software Resource Management Errors Vulnerability. Medium, CVSS 6.3, chance of use in 30 days 4.7%, known exploited since 3 March 2022.
- [CVE-2017-12319](https://www.edgeprotect.io/what-is/cve-2017-12319): Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability. Medium, CVSS 5.9, chance of use in 30 days 5.4%, known exploited since 3 March 2022.
- [CVE-2018-0180](https://www.edgeprotect.io/what-is/cve-2018-0180): Cisco IOS Software Denial-of-Service Vulnerability. Medium, CVSS 5.9, chance of use in 30 days 5.1%, known exploited since 3 March 2022.
- [CVE-2018-0179](https://www.edgeprotect.io/what-is/cve-2018-0179): Cisco IOS Software Denial-of-Service Vulnerability. Medium, CVSS 5.9, chance of use in 30 days 5.1%, known exploited since 3 March 2022.
- [CVE-2021-44228](https://www.edgeprotect.io/what-is/cve-2021-44228): Apache Log4j2 Remote Code Execution Vulnerability. Critical, CVSS 10.0, chance of use in 30 days >99%, known exploited since 10 December 2021.
- [CVE-2018-0171](https://www.edgeprotect.io/what-is/cve-2018-0171): Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2021-1497](https://www.edgeprotect.io/what-is/cve-2021-1497): Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2021-1498](https://www.edgeprotect.io/what-is/cve-2021-1498): Cisco HyperFlex HX Data Platform Command Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2020-3161](https://www.edgeprotect.io/what-is/cve-2020-3161): Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 84%, known exploited since 3 November 2021.
- [CVE-2020-3118](https://www.edgeprotect.io/what-is/cve-2020-3118): Cisco IOS XR Software Discovery Protocol Format String Vulnerability. High, CVSS 8.8, chance of use in 30 days 12%, known exploited since 3 November 2021.
- [CVE-2020-3566](https://www.edgeprotect.io/what-is/cve-2020-3566): Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability. High, CVSS 8.6, chance of use in 30 days 3.6%, known exploited since 3 November 2021.
- [CVE-2020-3569](https://www.edgeprotect.io/what-is/cve-2020-3569): Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability. High, CVSS 8.6, chance of use in 30 days 3.3%, known exploited since 3 November 2021.
- [CVE-2017-9805](https://www.edgeprotect.io/what-is/cve-2017-9805): Apache Struts Deserialization of Untrusted Data Vulnerability. High, CVSS 8.1, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2018-0296](https://www.edgeprotect.io/what-is/cve-2018-0296): Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2020-3452](https://www.edgeprotect.io/what-is/cve-2020-3452): Cisco ASA and FTD Read-Only Path Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2019-1653](https://www.edgeprotect.io/what-is/cve-2019-1653): Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2020-3580](https://www.edgeprotect.io/what-is/cve-2020-3580): Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability. Medium, CVSS 6.1, chance of use in 30 days 85%, known exploited since 3 November 2021.

## Which Cisco flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-1999-0016](https://www.edgeprotect.io/what-is/cve-1999-0016): 96%, Medium (CVSS 5.0)
- [CVE-2005-0356](https://www.edgeprotect.io/what-is/cve-2005-0356): 83%, Medium (CVSS 5.0)
- [CVE-2002-1359](https://www.edgeprotect.io/what-is/cve-2002-1359): 80%, Critical (CVSS 10.0)
- [CVE-2000-0945](https://www.edgeprotect.io/what-is/cve-2000-0945): 73%, Critical (CVSS 10.0)
- [CVE-2011-2039](https://www.edgeprotect.io/what-is/cve-2011-2039): 70%, High (CVSS 7.6)
- [CVE-2001-0537](https://www.edgeprotect.io/what-is/cve-2001-0537): 68%, Critical (CVSS 9.3)
- [CVE-2008-3558](https://www.edgeprotect.io/what-is/cve-2008-3558): 65%, Critical (CVSS 9.3)
- [CVE-2008-0532](https://www.edgeprotect.io/what-is/cve-2008-0532): 57%, Critical (CVSS 10.0)

## All Cisco products we track

253 products with at least one tracked version, most vulnerabilities first (the top 150 here; every product is on the page):

- [IOS](https://www.edgeprotect.io/product/cisco/ios): 598 vulnerabilities, 8,443 versions
- [IOS XE](https://www.edgeprotect.io/product/cisco/ios_xe): 506 vulnerabilities, 1,101 versions
- [Adaptive Security Appliance Software](https://www.edgeprotect.io/product/cisco/adaptive_security_appliance_software): 324 vulnerabilities, 1,062 versions
- [NX-OS](https://www.edgeprotect.io/product/cisco/nx-os): 275 vulnerabilities, 1,098 versions
- [Unified Communications Manager](https://www.edgeprotect.io/product/cisco/unified_communications_manager): 233 vulnerabilities, 306 versions
- [Firepower Threat Defense](https://www.edgeprotect.io/product/cisco/firepower_threat_defense): 220 vulnerabilities, 380 versions
- [IOS XR](https://www.edgeprotect.io/product/cisco/ios_xr): 188 vulnerabilities, 320 versions
- [Identity Services Engine](https://www.edgeprotect.io/product/cisco/identity_services_engine): 149 vulnerabilities, 111 versions
- [Webex Meetings Server](https://www.edgeprotect.io/product/cisco/webex_meetings_server): 136 vulnerabilities, 63 versions
- [Firepower Management Center](https://www.edgeprotect.io/product/cisco/firepower_management_center): 130 vulnerabilities, 207 versions
- [Rv110w Firmware](https://www.edgeprotect.io/product/cisco/rv110w_firmware): 128 vulnerabilities, 42 versions
- [Rv130w Firmware](https://www.edgeprotect.io/product/cisco/rv130w_firmware): 127 vulnerabilities, 42 versions
- [Unified Computing System](https://www.edgeprotect.io/product/cisco/unified_computing_system): 109 vulnerabilities, 326 versions
- [Wireless LAN Controller Software](https://www.edgeprotect.io/product/cisco/wireless_lan_controller_software): 88 vulnerabilities, 219 versions
- [Prime Infrastructure](https://www.edgeprotect.io/product/cisco/prime_infrastructure): 81 vulnerabilities, 149 versions
- [Application Extension Platform](https://www.edgeprotect.io/product/cisco/application_extension_platform): 79 vulnerabilities, 2 versions
- [Catalyst SD-WAN Manager](https://www.edgeprotect.io/product/cisco/catalyst_sd-wan_manager): 74 vulnerabilities, 305 versions
- [Web Security Appliance](https://www.edgeprotect.io/product/cisco/web_security_appliance): 73 vulnerabilities, 125 versions
- [ASA 5580](https://www.edgeprotect.io/product/cisco/asa_5580): 72 vulnerabilities, 1 version
- [Rv215w Firmware](https://www.edgeprotect.io/product/cisco/rv215w_firmware): 71 vulnerabilities, 42 versions
- [Anyconnect Secure Mobility Client](https://www.edgeprotect.io/product/cisco/anyconnect_secure_mobility_client): 68 vulnerabilities, 160 versions
- [Rv215w Wireless-N VPN Router Firmware](https://www.edgeprotect.io/product/cisco/rv215w_wireless-n_vpn_router_firmware): 68 vulnerabilities, 7 versions
- [Data Center Network Manager](https://www.edgeprotect.io/product/cisco/data_center_network_manager): 68 vulnerabilities, 20 versions
- [Adaptive Security Appliance](https://www.edgeprotect.io/product/cisco/adaptive_security_appliance): 65 vulnerabilities, 355 versions
- [Webex Meetings](https://www.edgeprotect.io/product/cisco/webex_meetings): 64 vulnerabilities, 251 versions
- [Rv130 VPN Router Firmware](https://www.edgeprotect.io/product/cisco/rv130_vpn_router_firmware): 62 vulnerabilities, 4 versions
- [ASA 5500](https://www.edgeprotect.io/product/cisco/asa_5500): 62 vulnerabilities, 12 versions
- [Webex Meetings Online](https://www.edgeprotect.io/product/cisco/webex_meetings_online): 59 vulnerabilities, 123 versions
- [Rv130 Firmware](https://www.edgeprotect.io/product/cisco/rv130_firmware): 59 vulnerabilities, 42 versions
- [Firepower Extensible Operating System](https://www.edgeprotect.io/product/cisco/firepower_extensible_operating_system): 56 vulnerabilities, 197 versions
- [Email Security Appliance](https://www.edgeprotect.io/product/cisco/email_security_appliance): 56 vulnerabilities, 115 versions
- [Unity Connection](https://www.edgeprotect.io/product/cisco/unity_connection): 56 vulnerabilities, 149 versions
- [Secure Firewall Management Center](https://www.edgeprotect.io/product/cisco/secure_firewall_management_center): 54 vulnerabilities, 220 versions
- [5500 Series Adaptive Security Appliance](https://www.edgeprotect.io/product/cisco/5500_series_adaptive_security_appliance): 53 vulnerabilities, 1 version
- [Rv320 Firmware](https://www.edgeprotect.io/product/cisco/rv320_firmware): 52 vulnerabilities, 40 versions
- [Rv325 Firmware](https://www.edgeprotect.io/product/cisco/rv325_firmware): 52 vulnerabilities, 40 versions
- [Asyncos](https://www.edgeprotect.io/product/cisco/asyncos): 52 vulnerabilities, 257 versions
- [Identity Services Engine Software](https://www.edgeprotect.io/product/cisco/identity_services_engine_software): 49 vulnerabilities, 46 versions
- [Rv042 Firmware](https://www.edgeprotect.io/product/cisco/rv042_firmware): 46 vulnerabilities, 39 versions
- [Rv042g Firmware](https://www.edgeprotect.io/product/cisco/rv042g_firmware): 46 vulnerabilities, 39 versions
- [Evolved Programmable Network Manager](https://www.edgeprotect.io/product/cisco/evolved_programmable_network_manager): 44 vulnerabilities, 121 versions
- [SD-WAN Vmanage](https://www.edgeprotect.io/product/cisco/sd-wan_vmanage): 42 vulnerabilities, 68 versions
- [SD-WAN Firmware](https://www.edgeprotect.io/product/cisco/sd-wan_firmware): 41 vulnerabilities, 50 versions
- [Telepresence Video Communication Server](https://www.edgeprotect.io/product/cisco/telepresence_video_communication_server): 41 vulnerabilities, 110 versions
- [Unified Communications Domain Manager](https://www.edgeprotect.io/product/cisco/unified_communications_domain_manager): 41 vulnerabilities, 31 versions
- [Mds 9000](https://www.edgeprotect.io/product/cisco/mds_9000): 40 vulnerabilities, 3 versions
- [Rv016 Firmware](https://www.edgeprotect.io/product/cisco/rv016_firmware): 37 vulnerabilities, 21 versions
- [Rv082 Firmware](https://www.edgeprotect.io/product/cisco/rv082_firmware): 37 vulnerabilities, 21 versions
- [Rv082 Dual WAN VPN Router Firmware](https://www.edgeprotect.io/product/cisco/rv082_dual_wan_vpn_router_firmware): 37 vulnerabilities, 4 versions
- [Nexus 1000v](https://www.edgeprotect.io/product/cisco/nexus_1000v): 36 vulnerabilities, 9 versions
- [Unified Communications Manager Im and Presence Service](https://www.edgeprotect.io/product/cisco/unified_communications_manager_im_and_presence_service): 36 vulnerabilities, 41 versions
- [Rv042 Dual WAN VPN Router Firmware](https://www.edgeprotect.io/product/cisco/rv042_dual_wan_vpn_router_firmware): 36 vulnerabilities, 2 versions
- [Rv320 Dual Gigabit WAN VPN Router Firmware](https://www.edgeprotect.io/product/cisco/rv320_dual_gigabit_wan_vpn_router_firmware): 35 vulnerabilities, 2 versions
- [Firesight System Software](https://www.edgeprotect.io/product/cisco/firesight_system_software): 35 vulnerabilities, 79 versions
- [Rv345 Firmware](https://www.edgeprotect.io/product/cisco/rv345_firmware): 35 vulnerabilities, 11 versions
- [Secure Access Control Server](https://www.edgeprotect.io/product/cisco/secure_access_control_server): 35 vulnerabilities, 68 versions
- [Rv340w Firmware](https://www.edgeprotect.io/product/cisco/rv340w_firmware): 35 vulnerabilities, 11 versions
- [Secure Access Control System](https://www.edgeprotect.io/product/cisco/secure_access_control_system): 35 vulnerabilities, 41 versions
- [Rv340 Firmware](https://www.edgeprotect.io/product/cisco/rv340_firmware): 35 vulnerabilities, 11 versions
- [Rv016 Multi-WAN VPN Router Firmware](https://www.edgeprotect.io/product/cisco/rv016_multi-wan_vpn_router_firmware): 35 vulnerabilities, 1 version
- [Rv345p Firmware](https://www.edgeprotect.io/product/cisco/rv345p_firmware): 35 vulnerabilities, 11 versions
- [Rv042g Dual Gigabit WAN VPN Router Firmware](https://www.edgeprotect.io/product/cisco/rv042g_dual_gigabit_wan_vpn_router_firmware): 35 vulnerabilities, 1 version
- [Rv325 Dual Gigabit WAN VPN Router Firmware](https://www.edgeprotect.io/product/cisco/rv325_dual_gigabit_wan_vpn_router_firmware): 35 vulnerabilities, 1 version
- [Prime Collaboration Provisioning](https://www.edgeprotect.io/product/cisco/prime_collaboration_provisioning): 34 vulnerabilities, 25 versions
- [Jabber](https://www.edgeprotect.io/product/cisco/jabber): 34 vulnerabilities, 106 versions
- [Wireless LAN Controller](https://www.edgeprotect.io/product/cisco/wireless_lan_controller): 34 vulnerabilities, 133 versions
- [Sg300-10mp Firmware](https://www.edgeprotect.io/product/cisco/sg300-10mp_firmware): 32 vulnerabilities, 13 versions
- [Sf302-08mpp Firmware](https://www.edgeprotect.io/product/cisco/sf302-08mpp_firmware): 32 vulnerabilities, 13 versions
- [Sg300-52mp Firmware](https://www.edgeprotect.io/product/cisco/sg300-52mp_firmware): 32 vulnerabilities, 13 versions
- [Sf302-08 Firmware](https://www.edgeprotect.io/product/cisco/sf302-08_firmware): 32 vulnerabilities, 13 versions
- [Sg300-20 Firmware](https://www.edgeprotect.io/product/cisco/sg300-20_firmware): 32 vulnerabilities, 13 versions
- [Sf300-24p Firmware](https://www.edgeprotect.io/product/cisco/sf300-24p_firmware): 32 vulnerabilities, 13 versions
- [Unified Contact Center Express](https://www.edgeprotect.io/product/cisco/unified_contact_center_express): 32 vulnerabilities, 141 versions
- [Sf302-08pp Firmware](https://www.edgeprotect.io/product/cisco/sf302-08pp_firmware): 32 vulnerabilities, 13 versions
- [Sf300-48p Firmware](https://www.edgeprotect.io/product/cisco/sf300-48p_firmware): 32 vulnerabilities, 13 versions
- [Sg300-10pp Firmware](https://www.edgeprotect.io/product/cisco/sg300-10pp_firmware): 32 vulnerabilities, 13 versions
- [Sg300-10mpp Firmware](https://www.edgeprotect.io/product/cisco/sg300-10mpp_firmware): 32 vulnerabilities, 13 versions
- [Sf300-24pp Firmware](https://www.edgeprotect.io/product/cisco/sf300-24pp_firmware): 32 vulnerabilities, 13 versions
- [Sg300-28 Firmware](https://www.edgeprotect.io/product/cisco/sg300-28_firmware): 32 vulnerabilities, 13 versions
- [Sg300-52 Firmware](https://www.edgeprotect.io/product/cisco/sg300-52_firmware): 32 vulnerabilities, 13 versions
- [Sf300-48pp Firmware](https://www.edgeprotect.io/product/cisco/sf300-48pp_firmware): 32 vulnerabilities, 12 versions
- [Sg300-28p Firmware](https://www.edgeprotect.io/product/cisco/sg300-28p_firmware): 32 vulnerabilities, 13 versions
- [Sg300-10 Firmware](https://www.edgeprotect.io/product/cisco/sg300-10_firmware): 32 vulnerabilities, 13 versions
- [Sg300-10p Firmware](https://www.edgeprotect.io/product/cisco/sg300-10p_firmware): 32 vulnerabilities, 13 versions
- [Sg300-52p Firmware](https://www.edgeprotect.io/product/cisco/sg300-52p_firmware): 32 vulnerabilities, 13 versions
- [Email Security Appliance Firmware](https://www.edgeprotect.io/product/cisco/email_security_appliance_firmware): 32 vulnerabilities, 109 versions
- [Sg300-28mp Firmware](https://www.edgeprotect.io/product/cisco/sg300-28mp_firmware): 32 vulnerabilities, 13 versions
- [Sf300-08 Firmware](https://www.edgeprotect.io/product/cisco/sf300-08_firmware): 32 vulnerabilities, 13 versions
- [Sf300-24 Firmware](https://www.edgeprotect.io/product/cisco/sf300-24_firmware): 32 vulnerabilities, 13 versions
- [Sg300-28pp Firmware](https://www.edgeprotect.io/product/cisco/sg300-28pp_firmware): 32 vulnerabilities, 12 versions
- [Sf300-24mp Firmware](https://www.edgeprotect.io/product/cisco/sf300-24mp_firmware): 32 vulnerabilities, 13 versions
- [Sf300-48 Firmware](https://www.edgeprotect.io/product/cisco/sf300-48_firmware): 32 vulnerabilities, 13 versions
- [Sg300-10sfp Firmware](https://www.edgeprotect.io/product/cisco/sg300-10sfp_firmware): 31 vulnerabilities, 13 versions
- [Webex Meeting Center](https://www.edgeprotect.io/product/cisco/webex_meeting_center): 31 vulnerabilities, 24 versions
- [Meeting Server](https://www.edgeprotect.io/product/cisco/meeting_server): 31 vulnerabilities, 108 versions
- [Firewall Services Module](https://www.edgeprotect.io/product/cisco/firewall_services_module): 30 vulnerabilities, 18 versions
- [Security Manager](https://www.edgeprotect.io/product/cisco/security_manager): 30 vulnerabilities, 35 versions
- [Sg500x-24 Firmware](https://www.edgeprotect.io/product/cisco/sg500x-24_firmware): 29 vulnerabilities, 11 versions
- [Sg500-52p Firmware](https://www.edgeprotect.io/product/cisco/sg500-52p_firmware): 29 vulnerabilities, 11 versions
- [Sg500-28p Firmware](https://www.edgeprotect.io/product/cisco/sg500-28p_firmware): 29 vulnerabilities, 11 versions
- [Sf500-24 Firmware](https://www.edgeprotect.io/product/cisco/sf500-24_firmware): 29 vulnerabilities, 11 versions
- [Sf500-48 Firmware](https://www.edgeprotect.io/product/cisco/sf500-48_firmware): 29 vulnerabilities, 11 versions
- [Sg500x-48p Firmware](https://www.edgeprotect.io/product/cisco/sg500x-48p_firmware): 29 vulnerabilities, 11 versions
- [Sg500-28mpp Firmware](https://www.edgeprotect.io/product/cisco/sg500-28mpp_firmware): 29 vulnerabilities, 11 versions
- [Sg500x-48 Firmware](https://www.edgeprotect.io/product/cisco/sg500x-48_firmware): 29 vulnerabilities, 11 versions
- [Sg500-28 Firmware](https://www.edgeprotect.io/product/cisco/sg500-28_firmware): 29 vulnerabilities, 11 versions
- [Telepresence Video Communication Server Software](https://www.edgeprotect.io/product/cisco/telepresence_video_communication_server_software): 29 vulnerabilities, 26 versions
- [Sf500-24p Firmware](https://www.edgeprotect.io/product/cisco/sf500-24p_firmware): 29 vulnerabilities, 11 versions
- [Application Policy Infrastructure Controller](https://www.edgeprotect.io/product/cisco/application_policy_infrastructure_controller): 28 vulnerabilities, 461 versions
- [Pix Firewall Software](https://www.edgeprotect.io/product/cisco/pix_firewall_software): 28 vulnerabilities, 69 versions
- [Sf500-48p Firmware](https://www.edgeprotect.io/product/cisco/sf500-48p_firmware): 28 vulnerabilities, 9 versions
- [Webex Recording Format Player](https://www.edgeprotect.io/product/cisco/webex_recording_format_player): 28 vulnerabilities, 21 versions
- [Content Security Management Appliance](https://www.edgeprotect.io/product/cisco/content_security_management_appliance): 28 vulnerabilities, 49 versions
- [Integrated Management Controller Supervisor](https://www.edgeprotect.io/product/cisco/integrated_management_controller_supervisor): 27 vulnerabilities, 54 versions
- [SD-WAN](https://www.edgeprotect.io/product/cisco/sd-wan): 27 vulnerabilities, 84 versions
- [Sg500x-24p Firmware](https://www.edgeprotect.io/product/cisco/sg500x-24p_firmware): 27 vulnerabilities, 11 versions
- [Aironet Access Point Software](https://www.edgeprotect.io/product/cisco/aironet_access_point_software): 27 vulnerabilities, 39 versions
- [Telepresence Tc Software](https://www.edgeprotect.io/product/cisco/telepresence_tc_software): 27 vulnerabilities, 80 versions
- [Emergency Responder](https://www.edgeprotect.io/product/cisco/emergency_responder): 27 vulnerabilities, 49 versions
- [UCS Director](https://www.edgeprotect.io/product/cisco/ucs_director): 26 vulnerabilities, 87 versions
- [Ios XE SD-WAN](https://www.edgeprotect.io/product/cisco/ios_xe_sd-wan): 26 vulnerabilities, 49 versions
- [Sg200-50p Firmware](https://www.edgeprotect.io/product/cisco/sg200-50p_firmware): 25 vulnerabilities, 7 versions
- [SD-WAN Vbond Orchestrator](https://www.edgeprotect.io/product/cisco/sd-wan_vbond_orchestrator): 25 vulnerabilities, 7 versions
- [Telepresence System Software](https://www.edgeprotect.io/product/cisco/telepresence_system_software): 25 vulnerabilities, 108 versions
- [Sg200-50 Firmware](https://www.edgeprotect.io/product/cisco/sg200-50_firmware): 25 vulnerabilities, 7 versions
- [Sg200-26 Firmware](https://www.edgeprotect.io/product/cisco/sg200-26_firmware): 25 vulnerabilities, 7 versions
- [Unified Meetingplace](https://www.edgeprotect.io/product/cisco/unified_meetingplace): 25 vulnerabilities, 24 versions
- [ASA 5515-X Firmware](https://www.edgeprotect.io/product/cisco/asa_5515-x_firmware): 25 vulnerabilities, 45 versions
- [ASA 5512-X Firmware](https://www.edgeprotect.io/product/cisco/asa_5512-x_firmware): 25 vulnerabilities, 45 versions
- [Sg200-18 Firmware](https://www.edgeprotect.io/product/cisco/sg200-18_firmware): 25 vulnerabilities, 6 versions
- [Sg200-26p Firmware](https://www.edgeprotect.io/product/cisco/sg200-26p_firmware): 25 vulnerabilities, 7 versions
- [Staros](https://www.edgeprotect.io/product/cisco/staros): 25 vulnerabilities, 229 versions
- [Sg500xg-8f8t Firmware](https://www.edgeprotect.io/product/cisco/sg500xg-8f8t_firmware): 24 vulnerabilities, 9 versions
- [Sf200-24p Firmware](https://www.edgeprotect.io/product/cisco/sf200-24p_firmware): 24 vulnerabilities, 6 versions
- [Sf200-48 Firmware](https://www.edgeprotect.io/product/cisco/sf200-48_firmware): 24 vulnerabilities, 6 versions
- [Sf200-48p Firmware](https://www.edgeprotect.io/product/cisco/sf200-48p_firmware): 24 vulnerabilities, 5 versions
- [Sg550x-24mp Firmware](https://www.edgeprotect.io/product/cisco/sg550x-24mp_firmware): 24 vulnerabilities, 7 versions
- [ASA 5585-X Firmware](https://www.edgeprotect.io/product/cisco/asa_5585-x_firmware): 24 vulnerabilities, 43 versions
- [ASA 5580 Firmware](https://www.edgeprotect.io/product/cisco/asa_5580_firmware): 24 vulnerabilities, 45 versions
- [ASA 5555-X Firmware](https://www.edgeprotect.io/product/cisco/asa_5555-x_firmware): 24 vulnerabilities, 45 versions
- [ASA 5545-X Firmware](https://www.edgeprotect.io/product/cisco/asa_5545-x_firmware): 24 vulnerabilities, 45 versions
- [ASA 5525-X Firmware](https://www.edgeprotect.io/product/cisco/asa_5525-x_firmware): 24 vulnerabilities, 45 versions
- [Sg550x-24 Firmware](https://www.edgeprotect.io/product/cisco/sg550x-24_firmware): 24 vulnerabilities, 7 versions
- [Sf550x-48mp Firmware](https://www.edgeprotect.io/product/cisco/sf550x-48mp_firmware): 24 vulnerabilities, 7 versions
- [Finesse](https://www.edgeprotect.io/product/cisco/finesse): 24 vulnerabilities, 43 versions
- [Sf550x-48p Firmware](https://www.edgeprotect.io/product/cisco/sf550x-48p_firmware): 24 vulnerabilities, 7 versions
- [VPN 3000 Concentrator Series Software](https://www.edgeprotect.io/product/cisco/vpn_3000_concentrator_series_software): 24 vulnerabilities, 50 versions
- [Sf550x-24p Firmware](https://www.edgeprotect.io/product/cisco/sf550x-24p_firmware): 24 vulnerabilities, 7 versions
- [Telepresence Collaboration Endpoint](https://www.edgeprotect.io/product/cisco/telepresence_collaboration_endpoint): 24 vulnerabilities, 74 versions
- [Sg550x-48p Firmware](https://www.edgeprotect.io/product/cisco/sg550x-48p_firmware): 24 vulnerabilities, 7 versions

## Questions

### How many vulnerabilities does Cisco have?

Our catalogue lists 6,360 published vulnerabilities across 6,582 products and 34,538 versions from Cisco. The most recent Cisco flaw added to the known-exploited list is CVE-2022-20775, on 25 February 2026.

### Which Cisco vulnerabilities are being exploited?

88 Cisco vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2022-20775, CVE-2025-20352 and CVE-2025-20333. The full list is on this page.

### Which Cisco product has the most vulnerabilities?

IOS, with 598 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new Cisco vulnerabilities?

Create a EdgeProtect account and track the Cisco products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running Cisco?

EdgeProtect keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.edgeprotect.io/register
Book a demo: https://www.edgeprotect.io/contact