Advisories · Technology

Cisco Enterprise NFV Infrastructure Software.

Every CVE that names Cisco Enterprise NFV Infrastructure Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-20293 CVE record

CVSS 7.1 High

Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Managed)
- CWE-749
Not analysed yet 8 Sept 2026
CVE-2026-20288 CVE record

CVSS 6.5 Medium

Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- CWE-146
Not analysed yet 5 Aug 2026
CVE-2026-20198 CVE record

CVSS 4.8 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 5 Aug 2026
CVE-2026-20090 CVE record

CVSS 4.8 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2026-20089 CVE record

CVSS 4.8 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2026-20087 CVE record

CVSS 4.8 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2026-20088 CVE record

CVSS 4.8 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2026-20096 CVE record

CVSS 6.5 Medium

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Command injection
Not analysed yet 1 Apr 2026
CVE-2026-20095 CVE record

CVSS 6.5 Medium

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Command injection
Not analysed yet 1 Apr 2026
CVE-2026-20093 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Integrated Management Controller Authentication Bypass Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- CWE-20
Not analysed yet 1 Apr 2026
CVE-2026-20085 CVE record

CVSS 6.1 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2022-20655 CVE record

CVSS 8.8 High

OS command injection in Cisco IOS XR Software and others
- Cisco IOS XR Software
- Cisco Virtual Topology System (VTS)
- Command injection
Not analysed yet 15 Nov 2024
CVE-2022-20929 CVE record

CVSS 7.8 High

Improper signature verification in Cisco Enterprise NFV Infrastructure Software
- Cisco Enterprise NFV Infrastructure Software
- Weak cryptography or TLS
Not analysed yet 8 Mar 2023
CVE-2022-20780 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco Enterprise NFV Infrastructure Software Vulnerabilities
- Cisco Enterprise NFV Infrastructure Software
- Broken access control
Not analysed yet 4 May 2022
CVE-2022-20779 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco Enterprise NFV Infrastructure Software Vulnerabilities
- Cisco Enterprise NFV Infrastructure Software
- Broken access control
Not analysed yet 4 May 2022
CVE-2022-20777 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco Enterprise NFV Infrastructure Software Vulnerabilities
- Cisco Enterprise NFV Infrastructure Software
- Broken access control
Not analysed yet 4 May 2022
CVE-2021-34746 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco Enterprise NFV Infrastructure Software Authentication Bypass Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- CWE-289
Not analysed yet 2 Sept 2021
CVE-2021-1421 CVE record

CVSS 7.8 High

Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Command injection
Not analysed yet 6 May 2021
CVE-2021-1127 CVE record

CVSS 5.4 Medium

Cisco Enterprise NFV Infrastructure Software Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2021
CVE-2020-3365 CVE record

CVSS 4.3 Medium

Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Path traversal
Not analysed yet 4 Sept 2020
CVE-2020-3478 CVE record

CVSS 8.1 High

Cisco Enterprise NFV Infrastructure Software File Overwrite Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- CWE-20
Not analysed yet 4 Sept 2020
CVE-2020-3236 CVE record

CVSS 6.7 Medium

Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Path traversal
Not analysed yet 18 Jun 2020
CVE-2019-1984 CVE record

CVSS 6.5 Medium

Cisco Enterprise Network Functions Virtualization Infrastructure Software Arbitrary File Write Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- CWE-20
Not analysed yet 21 Aug 2019
CVE-2019-12623 CVE record

CVSS 4.3 Medium

Cisco Enterprise Network Functions Virtualization Infrastructure Software File Enumeration Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Information disclosure
Not analysed yet 21 Aug 2019
CVE-2019-1973 CVE record

CVSS 4.8 Medium

Cisco Enterprise NFV Infrastructure Software Cross-site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2019
CVE-2019-1959 CVE record

CVSS 4.4 Medium

Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities
- Cisco Enterprise NFV Infrastructure Software
- CWE-20
Not analysed yet 8 Aug 2019
CVE-2019-1960 CVE record

CVSS 4.4 Medium

Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities
- Cisco Enterprise NFV Infrastructure Software
- CWE-20
Not analysed yet 8 Aug 2019
CVE-2019-1961 CVE record

CVSS 4.9 Medium

Cisco Enterprise NFV Infrastructure Software Web Portal Arbitrary File Read Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Information disclosure
Not analysed yet 8 Aug 2019
CVE-2019-1971 CVE record

CVSS 8.1 High

Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Command injection
Not analysed yet 8 Aug 2019
CVE-2019-1972 CVE record

CVSS 6.7 Medium

Cisco Enterprise NFV Infrastructure Software Privilege Escalation Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- CWE-264
Not analysed yet 8 Aug 2019
CVE-2019-1953 CVE record

CVSS 6.5 Medium

Cisco Enterprise NFV Infrastructure Software Password Recovery Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Information disclosure
Not analysed yet 8 Aug 2019
CVE-2019-1952 CVE record

CVSS 6.7 Medium

Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Path traversal
Not analysed yet 8 Aug 2019
CVE-2019-1946 CVE record

CVSS 6.5 Medium

Cisco Enterprise NFV Infrastructure Software Web-Based Management Interface Authentication Bypass Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Authentication bypass
Not analysed yet 8 Aug 2019
CVE-2019-1895 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Enterprise NFV Infrastructure Software VNC Authentication Bypass Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Authentication bypass
Not analysed yet 7 Aug 2019
CVE-2019-1893 CVE record

CVSS 7.8 High

Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Command injection
Not analysed yet 6 Jul 2019
CVE-2019-1894 CVE record

CVSS 7.2 High

Cisco Enterprise NFV Infrastructure Software Arbitrary File Read and Write Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- CWE-20
Not analysed yet 6 Jul 2019
CVE-2019-1656 CVE record

CVSS 5.3 Medium

Cisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- CWE-20
Not analysed yet 24 Jan 2019
CVE-2018-15402 CVE record

CVSS 5.4 Medium

Cisco Enterprise NFV Infrastructure Software Cross-Site Request Forgery Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cross-site request forgery (CSRF)
Not analysed yet 17 Oct 2018
CVE-2018-0462 CVE record

Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- CWE-20
Not analysed yet 5 Oct 2018
CVE-2018-0460 CVE record

Cisco Enterprise NFV Infrastructure Software Information Disclosure Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Broken access control
Not analysed yet 5 Oct 2018
CVE-2018-0459 CVE record

Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Broken access control
Not analysed yet 5 Oct 2018
CVE-2018-0324 CVE record

Command injection in Cisco Enterprise NFV Infrastructure Software
- Cisco Enterprise NFV Infrastructure Software
- Command injection
Not analysed yet 17 May 2018
CVE-2018-0323 CVE record

Path traversal in Cisco Enterprise NFV Infrastructure Software
- Cisco Enterprise NFV Infrastructure Software
- Path traversal
Not analysed yet 17 May 2018
CVE-2018-0279 CVE record

Improper input validation in Cisco Enterprise NFV Infrastructure Software
- Cisco Enterprise NFV Infrastructure Software
- CWE-20
Not analysed yet 17 May 2018