EN
Product
Enterprise Nfv Infrastructure Software
On CISA KEVExploited in the wild
35
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 20Low 0
Watch
Add Enterprise Nfv Infrastructure Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3236 | 6.7 | Jun 18 | A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to gain root shell access to the underlying… Affected: before 4.1.1 |
| CVE-2020-3138 | 6.7 | Feb 19 | A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to install a malicious file when… Affected: through 3.11.1 |
| CVE-2019-1972 | 6.7 | Aug 8 | A vulnerability the Cisco Enterprise NFV Infrastructure Software (NFVIS) restricted CLI could allow an authenticated, local attacker with valid administrator-level credentials to… Affected: 3.6.3 through 3.10.3 |
| CVE-2019-1952 | 6.7 | Aug 8 | A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files Affected: before 3.10.1 |
| CVE-2026-20096 | 6.5 | Apr 1 | Cisco Integrated Management Controller Command Injection Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2026-20095 | 6.5 | Apr 1 | Cisco Integrated Management Controller Command Injection Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2020-3365 | 6.5 | Sep 4 | A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal… Affected: 3.5.1 through 4.1.2 |
| CVE-2019-1953 | 6.5 | Aug 8 | A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text Affected: before 3.9.1 |
| CVE-2019-1946 | 6.5 | Aug 8 | A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass… Affected: before 3.10.1 |
| CVE-2026-20085 | 6.1 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2021-1127 | 5.4 | Jan 13 | A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site… Affected: before 4.4.1 |
| CVE-2019-1656 | 5.3 | Jan 24 | Cisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability Affected: 3.9.1 |
| CVE-2019-1961 | 4.9 | Aug 8 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system… Affected: before 3.10.1 |
| CVE-2026-20090 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2026-20089 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2026-20087 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2026-20088 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.3.1; 3.4.1; 3.5.1; 3.5.2; 3.6.1; 3.6.2; +34 more |
| CVE-2019-1973 | 4.8 | Aug 8 | A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting… Affected: before 3.11.1 |
| CVE-2019-1960 | 4.4 | Aug 8 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating… Affected: before 3.11.1 |
| CVE-2019-1959 | 4.4 | Aug 8 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating… Affected: before 3.11.1 |
Showing 20