EN
Product
Enterprise Nfv Infrastructure Software
On CISA KEVExploited in the wild
35
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 20Low 0
Watch
Add Enterprise Nfv Infrastructure Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32433 In wildKEV | 10.0 | Apr 16 | Erlang/OTP SSH Vulnerable to Pre-Authentication RCE Affected: before 4.18 |
| CVE-2022-20777 | 9.9 | May 4 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject… Affected: before 4.7.1 |
| CVE-2021-34746 | 9.8 | Sep 2 | A vulnerability in the TACACS+ authentication, authorization and accounting (AAA) feature of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated,… Affected: before 4.6.1 |
| CVE-2020-3470 | 9.8 | Nov 18 | Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root… Affected: before 4.4.1 |
| CVE-2019-1971 | 9.8 | Aug 8 | A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and… Affected: 3.6.2 through 3.8.1 |
| CVE-2019-1895 | 9.8 | Aug 7 | A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote… Affected: before 3.12.1 |
| CVE-2022-20779 | 8.8 | May 4 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject… Affected: before 4.7.1 |
| CVE-2018-0279 | 8.8 | May 17 | A vulnerability in the Secure Copy Protocol (SCP) server of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to access the shell… Affected: before 3.6.3; 3.7.1 |
| CVE-2020-3478 | 8.1 | Sep 4 | A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be… Affected: 3.5.1 through 4.1.2 |
| CVE-2022-20929 | 7.8 | Mar 10 | A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local attacker to provide an… Affected: 3.5.1 before 4.9.1 |
| CVE-2021-1421 | 7.8 | May 6 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to perform a command injection attack on an affected device Affected: before 4.5.1 |
| CVE-2019-1893 | 7.8 | Jul 6 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: 3.9.1 |
| CVE-2022-20780 | 7.4 | May 4 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject… Affected: before 4.7.1 |
| CVE-2019-1894 | 7.2 | Jul 6 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite or read arbitrary… Affected: 3.9.1 |
| CVE-2026-20293 | 7.1 | Sep 8 | Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2020-3236 | 6.7 | Jun 18 | A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to gain root shell access to the underlying… Affected: before 4.1.1 |
| CVE-2020-3138 | 6.7 | Feb 19 | A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to install a malicious file when… Affected: through 3.11.1 |
| CVE-2019-1972 | 6.7 | Aug 8 | A vulnerability the Cisco Enterprise NFV Infrastructure Software (NFVIS) restricted CLI could allow an authenticated, local attacker with valid administrator-level credentials to… Affected: 3.6.3 through 3.10.3 |
| CVE-2019-1952 | 6.7 | Aug 8 | A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files Affected: before 3.10.1 |
| CVE-2026-20096 | 6.5 | Apr 1 | Cisco Integrated Management Controller Command Injection Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2026-20095 | 6.5 | Apr 1 | Cisco Integrated Management Controller Command Injection Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2020-3365 | 6.5 | Sep 4 | A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal… Affected: 3.5.1 through 4.1.2 |
| CVE-2019-1953 | 6.5 | Aug 8 | A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text Affected: before 3.9.1 |
| CVE-2019-1946 | 6.5 | Aug 8 | A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass… Affected: before 3.10.1 |
| CVE-2026-20085 | 6.1 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2021-1127 | 5.4 | Jan 13 | A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site… Affected: before 4.4.1 |
| CVE-2019-1656 | 5.3 | Jan 24 | Cisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability Affected: 3.9.1 |
| CVE-2019-1961 | 4.9 | Aug 8 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system… Affected: before 3.10.1 |
| CVE-2026-20090 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2026-20089 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2026-20087 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2026-20088 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2019-1973 | 4.8 | Aug 8 | A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting… Affected: before 3.11.1 |
| CVE-2019-1960 | 4.4 | Aug 8 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating… Affected: before 3.11.1 |
| CVE-2019-1959 | 4.4 | Aug 8 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating… Affected: before 3.11.1 |
Showing 35