cisco enterprise nfv infrastructure software

Name: cisco enterprise nfv infrastructure software
Brand: cisco

productUS

cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical9high13medium0low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-32433US	—OT critical	98.9% (100th)	KEV	4.18	2025-04-16	< 4.18
CVE-2021-34746US	critical9.8	17.7% (97th)	—	4.6.1	2021-09-02	< 4.6.1
CVE-2022-20780US	high7.4	11.2% (96th)	—	4.7.1	2022-05-04	< 4.7.1
CVE-2022-20777US	critical9.9OT elevated	11.1% (96th)	—	4.7.1	2022-05-04	< 4.7.1
CVE-2022-20779US	high8.8	10.5% (96th)	—	4.7.1	2022-05-04	< 4.7.1
CVE-2020-3470US	critical9.8	4.80% (92nd)	—	4.4.1	2020-11-18	< 4.4.1
CVE-2018-0279US	high8.8	4.32% (91st)	—	3.6.3	2018-05-17	2 versions
CVE-2019-1971US	critical9.8	3.61% (89th)	—	no fix	2019-08-08	3.6.2 → 3.8.1
CVE-2019-1894US	high7.2	3.39% (89th)	—	no fix	2019-07-06	= 3.9.1
CVE-2019-1895US	critical9.8OT elevated	2.30% (83rd)	—	3.12.1	2019-08-07	< 3.12.1
CVE-2019-1961US	medium4.9	1.91% (80th)	—	3.10.1	2019-08-08	< 3.10.1
CVE-2020-3365US	medium6.5	1.63% (76th)	—	no fix	2020-09-04	3.5.1 → 4.1.2
CVE-2019-1953US	medium6.5	1.50% (74th)	—	3.9.1	2019-08-08	< 3.9.1
CVE-2019-1946US	medium6.5	1.46% (73rd)	—	3.10.1	2019-08-08	< 3.10.1
CVE-2020-3478US	high8.1	1.22% (69th)	—	no fix	2020-09-04	3.5.1 → 4.1.2
CVE-2026-20095US	—	0.93% (60th)	—	no fix	2026-04-01	69 versions
CVE-2019-1973US	medium4.8	0.81% (57th)	—	3.11.1	2019-08-08	< 3.11.1
CVE-2019-1952US	medium6.7	0.72% (54th)	—	3.10.1	2019-08-08	< 3.10.1
CVE-2026-20096US	—	0.72% (54th)	—	no fix	2026-04-01	69 versions
CVE-2021-1421US	high7.8	0.67% (52nd)	—	4.5.1	2021-05-06	< 4.5.1
CVE-2019-1893US	high7.8	0.63% (50th)	—	no fix	2019-07-06	= 3.9.1
CVE-2021-1127US	medium5.4	0.62% (50th)	—	4.4.1	2021-01-13	< 4.4.1
CVE-2019-1972US	medium6.7	0.50% (43rd)	—	no fix	2019-08-08	3.6.3 → 3.10.3
CVE-2020-3236US	medium6.7	0.47% (40th)	—	4.1.1	2020-06-18	< 4.1.1
CVE-2019-1656US	medium5.3	0.39% (33rd)	—	no fix	2019-01-24	= 3.9.1
CVE-2019-1960US	medium4.4	0.35% (29th)	—	3.11.1	2019-08-08	< 3.11.1
CVE-2019-1959US	medium4.4	0.35% (29th)	—	3.11.1	2019-08-08	< 3.11.1
CVE-2026-20090US	—	0.24% (15th)	—	no fix	2026-04-01	69 versions
CVE-2026-20089US	—	0.24% (15th)	—	no fix	2026-04-01	69 versions
CVE-2026-20088US	—	0.22% (13th)	—	no fix	2026-04-01	69 versions
CVE-2020-3138US	medium6.7	0.21% (11th)	—	no fix	2020-02-19	≤ 3.11.1
CVE-2022-20929US	high7.8	0.19% (8th)	—	4.9.1	2023-03-10	3.5.1 → 4.9.1
CVE-2026-20085US	—	0.18% (8th)	—	no fix	2026-04-01	68 versions
CVE-2026-20293US	high7.1	0.18% (8th)	—	no fix	2026-09-08	65 versions
CVE-2026-20087US	—	0.17% (6th)	—	no fix	2026-04-01	70 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation11 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan