# CWE-399. Every Advisory and CVE whose sources give the weakness CWE-399, newest first. ## Records, newest first (an older page) - [A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated, r…](https://agentprime.io/advisories/CVE-2017-12287.md) `CVE-2017-12287` · CVE record: Cisco Expressway Series and Cisco TelePresence Video Communication Server · No CVSS score · Not analysed yet · Published 19 Oct 2017 · Tags: CWE-399 - [Cisco Wide Area Application Services: A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services…](https://agentprime.io/advisories/CVE-2017-12256.md) `CVE-2017-12256` · CVE record: Cisco Wide Area Application Services · No CVSS score · Not analysed yet · Published 5 Oct 2017 · Tags: CWE-399 - [A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an affected dev…](https://agentprime.io/advisories/CVE-2017-12246.md) `CVE-2017-12246` · CVE record: Cisco Adaptive Security Appliance Software · No CVSS score · Not analysed yet · Published 5 Oct 2017 · Tags: CWE-399 - [A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause depletion of system memory, aka a Firepower Detect…](https://agentprime.io/advisories/CVE-2017-12245.md) `CVE-2017-12245` · CVE record: Cisco Firepower Detection Engine · No CVSS score · Not analysed yet · Published 5 Oct 2017 · Tags: CWE-399 - [Cisco IOS: A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through…](https://agentprime.io/advisories/CVE-2017-12238.md) `CVE-2017-12238` · CVE record: Cisco IOS · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-399 - [A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CP…](https://agentprime.io/advisories/CVE-2017-12237.md) `CVE-2017-12237` · CVE record: Cisco IOS and IOS XE · CVSS 7.5 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-399 - [Cisco IOS: A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers…](https://agentprime.io/advisories/CVE-2017-12232.md) `CVE-2017-12232` · CVE record: Cisco IOS · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-399 - [Cisco IOS: A vulnerability in the implementation of Network Address Translation (NAT) functionality…](https://agentprime.io/advisories/CVE-2017-12231.md) `CVE-2017-12231` · CVE record: Cisco IOS · CVSS 7.5 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-399 - [Cisco IOS XE: A vulnerability in the wireless controller manager of Cisco IOS XE could allow an…](https://agentprime.io/advisories/CVE-2017-12222.md) `CVE-2017-12222` · CVE record: Cisco IOS XE · No CVSS score · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-399 - [Cisco Wide Area Application Services: A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS)…](https://agentprime.io/advisories/CVE-2017-12250.md) `CVE-2017-12250` · CVE record: Cisco Wide Area Application Services · No CVSS score · Not analysed yet · Published 21 Sept 2017 · Tags: CWE-399 - [Cisco Small Business SPA300, SPA500…: A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300…](https://agentprime.io/advisories/CVE-2017-12219.md) `CVE-2017-12219` · CVE record: Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones · No CVSS score · Not analysed yet · Published 21 Sept 2017 · Tags: CWE-399 - [Cisco IoT Field Network Director: A vulnerability in the TCP throttling process for Cisco IoT Field Network Director…](https://agentprime.io/advisories/CVE-2017-6780.md) `CVE-2017-6780` · CVE record: Cisco IoT Field Network Director · No CVSS score · Not analysed yet · Published 7 Sept 2017 · Tags: CWE-399 - [A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco for Yes could allow an unauthenticated, remote attacker to cause a denial of servi…](https://agentprime.io/advisories/CVE-2017-6631.md) `CVE-2017-6631` · CVE record: Cisco Yes Set-Top Box · No CVSS score · Not analysed yet · Published 7 Sept 2017 · Tags: CWE-399 - [A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected syste…](https://agentprime.io/advisories/CVE-2017-6627.md) `CVE-2017-6627` · CVE record: Cisco IOS and Cisco IOS XE · CVSS 7.5 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 7 Sept 2017 · Tags: CWE-399 - [Cisco IOS and Cisco IOS XE: A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS…](https://agentprime.io/advisories/CVE-2017-12211.md) `CVE-2017-12211` · CVE record: Cisco IOS and Cisco IOS XE · No CVSS score · Not analysed yet · Published 7 Sept 2017 · Tags: CWE-399 - [Cisco Virtualized Packet Core-Distributed Instance: A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized…](https://agentprime.io/advisories/CVE-2017-6678.md) `CVE-2017-6678` · CVE record: Cisco Virtualized Packet Core-Distributed Instance · No CVSS score · Not analysed yet · Published 26 Jun 2017 · Tags: CWE-399 - [A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause a TeleP…](https://agentprime.io/advisories/CVE-2017-6648.md) `CVE-2017-6648` · CVE record: Cisco TelePresence Endpoint Denial of Service Vulnerability · No CVSS score · Not analysed yet · Published 8 Jun 2017 · Tags: CWE-399 - [Cisco Identity Services Engine: A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services…](https://agentprime.io/advisories/CVE-2017-6653.md) `CVE-2017-6653` · CVE record: Cisco Identity Services Engine · No CVSS score · Not analysed yet · Published 22 May 2017 · Tags: CWE-399 - [Cisco Remote Expert Manager: A vulnerability in the TCP connection handling functionality of Cisco Remote Expert…](https://agentprime.io/advisories/CVE-2017-6641.md) `CVE-2017-6641` · CVE record: Cisco Remote Expert Manager · No CVSS score · Not analysed yet · Published 22 May 2017 · Tags: CWE-399 - [Cisco FirePOWER System Software: A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for…](https://agentprime.io/advisories/CVE-2017-6632.md) `CVE-2017-6632` · CVE record: Cisco FirePOWER System Software · No CVSS score · Not analysed yet · Published 22 May 2017 · Tags: CWE-399 - [Cisco IP Phone 8851: A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone…](https://agentprime.io/advisories/CVE-2017-6630.md) `CVE-2017-6630` · CVE record: Cisco IP Phone 8851 · No CVSS score · Not analysed yet · Published 22 May 2017 · Tags: CWE-399 - [Cisco IOS XR: A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers…](https://agentprime.io/advisories/CVE-2017-3876.md) `CVE-2017-3876` · CVE record: Cisco IOS XR · No CVSS score · Not analysed yet · Published 16 May 2017 · Tags: CWE-399 - [A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of s…](https://agentprime.io/advisories/CVE-2017-6628.md) `CVE-2017-6628` · CVE record: Cisco Wide Area Application Services SMART-SSL Accelerator · No CVSS score · Not analysed yet · Published 3 May 2017 · Tags: CWE-399 - [A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access control policy of Cisco Firepower System Software could allow…](https://agentprime.io/advisories/CVE-2017-6625.md) `CVE-2017-6625` · CVE record: Cisco Firepower Threat Defense and Cisco ASA with FirePOWER Module · No CVSS score · Not analysed yet · Published 3 May 2017 · Tags: CWE-399 - [A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service (DoS) condition.](https://agentprime.io/advisories/CVE-2017-6615.md) `CVE-2017-6615` · CVE record: Cisco IOS XE Software · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: CWE-399 - [Cisco Prime Network Registrar: A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could…](https://agentprime.io/advisories/CVE-2017-6613.md) `CVE-2017-6613` · CVE record: Cisco Prime Network Registrar · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: CWE-399 - [Cisco ASA Software: A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA…](https://agentprime.io/advisories/CVE-2017-6610.md) `CVE-2017-6610` · CVE record: Cisco ASA Software · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: CWE-399 - [Cisco ASA Software: A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated…](https://agentprime.io/advisories/CVE-2017-6609.md) `CVE-2017-6609` · CVE record: Cisco ASA Software · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: CWE-399 - [Cisco ASA Software: A vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code…](https://agentprime.io/advisories/CVE-2017-6608.md) `CVE-2017-6608` · CVE record: Cisco ASA Software · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: CWE-399 - [Cisco ASA Software: A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated…](https://agentprime.io/advisories/CVE-2017-6607.md) `CVE-2017-6607` · CVE record: Cisco ASA Software · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: CWE-399 - [A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0 through 8.7 and 9.0 through 9.6) and Cisco Firepower Threat Defense (FTD) Software could allow an unauth…](https://agentprime.io/advisories/CVE-2017-3793.md) `CVE-2017-3793` · CVE record: Cisco ASA Software and Cisco FTD Software · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: CWE-399 - [A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a de…](https://agentprime.io/advisories/CVE-2016-6368.md) `CVE-2016-6368` · CVE record: Cisco Firepower Detection Engine · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: CWE-399 - [Cisco Wireless LAN Controller: A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in…](https://agentprime.io/advisories/CVE-2016-9194.md) `CVE-2016-9194` · CVE record: Cisco Wireless LAN Controller · No CVSS score · Not analysed yet · Published 6 Apr 2017 · Tags: CWE-399 - [A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote attacker to cause a denial…](https://agentprime.io/advisories/CVE-2017-3864.md) `CVE-2017-3864` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 22 Mar 2017 · Tags: CWE-399 - [A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an unauthenticated, re…](https://agentprime.io/advisories/CVE-2017-3857.md) `CVE-2017-3857` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 22 Mar 2017 · Tags: CWE-399 - [Cisco IOS XE: A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an…](https://agentprime.io/advisories/CVE-2017-3856.md) `CVE-2017-3856` · CVE record: Cisco IOS XE · No CVSS score · Not analysed yet · Published 22 Mar 2017 · Tags: CWE-399 - [Cisco NetFlow Generation Appliance: A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco…](https://agentprime.io/advisories/CVE-2017-3826.md) `CVE-2017-3826` · CVE record: Cisco NetFlow Generation Appliance · No CVSS score · Not analysed yet · Published 1 Mar 2017 · Tags: CWE-399 - [A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote attacker to cause a re…](https://agentprime.io/advisories/CVE-2017-3790.md) `CVE-2017-3790` · CVE record: Cisco Expressway Series Software and Cisco TelePresence VCS Software All versions prior to version X8.8.2 are vulnerable · No CVSS score · Not analysed yet · Published 1 Feb 2017 · Tags: CWE-399 - [all versions of the ASA CX Context-Aware Security module: A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security…](https://agentprime.io/advisories/CVE-2016-9225.md) `CVE-2016-9225` · CVE record: all versions of the ASA CX Context-Aware Security module · No CVSS score · Not analysed yet · Published 1 Feb 2017 · Tags: CWE-399 - [Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other…](https://agentprime.io/advisories/CVE-2014-1745.md) `CVE-2014-1745` · CVE record · CVSS 7.1 High · Not analysed yet · Published 21 May 2014 · Tags: CWE-399 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .