What’s Vulnerable › Products

Cisco Enterprise NFV Infrastructure Software vulnerabilities

38 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your Cisco Enterprise NFV Infrastructure Software version is affected

Exploited Cisco Enterprise NFV Infrastructure Software vulnerabilities

• CVE-2025-32433 — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

Latest Cisco Enterprise NFV Infrastructure Software vulnerabilities

• CVE-2026-20293 — Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability (CVSS 7.1)
• CVE-2026-20198 — Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2026-20096 — Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 6.5)
• CVE-2026-20095 — Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 6.5)
• CVE-2026-20093 — Cisco Integrated Management Controller Authentication Bypass Vulnerability (CVSS 9.8)
• CVE-2026-20090 — Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2026-20089 — Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2026-20088 — Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2026-20087 — Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2026-20085 — Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2025-32433 — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability (CVSS 10.0) — exploited
• CVE-2022-20655 — (CVSS 8.8)
• CVE-2022-20929 — (CVSS 7.8)
• CVE-2022-20780 — Cisco Enterprise NFV Infrastructure Software Vulnerabilities (CVSS 7.4)
• CVE-2022-20779 — Cisco Enterprise NFV Infrastructure Software Vulnerabilities (CVSS 8.8)
• CVE-2022-20777 — Cisco Enterprise NFV Infrastructure Software Vulnerabilities (CVSS 9.9)
• CVE-2021-34746 — Cisco Enterprise NFV Infrastructure Software Authentication Bypass Vulnerability (CVSS 9.8)
• CVE-2021-1421 — Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability (CVSS 7.8)
• CVE-2021-1127 — Cisco Enterprise NFV Infrastructure Software Cross-Site Scripting Vulnerability (CVSS 5.4)
• CVE-2020-3470 — Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities (CVSS 9.8)
• CVE-2020-3478 — Cisco Enterprise NFV Infrastructure Software File Overwrite Vulnerability (CVSS 8.1)
• CVE-2020-3365 — Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability (CVSS 6.5)
• CVE-2020-3236 — Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability (CVSS 6.7)
• CVE-2020-3138 — Cisco Enterprise NFV Infrastructure Software Remote Code Execution Vulnerability (CVSS 6.7)
• CVE-2019-1973 — Cisco Enterprise NFV Infrastructure Software Cross-site Scripting Vulnerability (CVSS 4.8)