Cisco

Transparency

Limited

Breakdown

Subprocessor list	not found	0 / 30
Processing locations	no list	0 / 8
Purposes	no list	0 / 7
Data processing addendum	not found	0 / 12
Trust center		8 / 8
Privacy policy		6 / 6
security.txt		6 / 6
Security page		5 / 5
Status page		5 / 5
Vulnerability disclosure	not found	0 / 5
Pages still reachable		8 / 8
Total		38 / 100

Only documents we can retrieve count: a page behind a login or a broken link scores nothing.

Badge

For Cisco's own site; it updates with the rating.

<a href="https://thirdpartyindex.com/vendors/cisco"><img src="https://thirdpartyindex.com/badge/cisco.svg" alt="Cisco transparency rating on Third Party Index" height="20"></a>

[![Cisco transparency rating on Third Party Index](https://thirdpartyindex.com/badge/cisco.svg)](https://thirdpartyindex.com/vendors/cisco)

Documents

Document	Verified	Changed	Evidence
Trust center	4 hours ago	Sep 27, 2026	snapshot
Privacy policy	4 hours ago	Sep 22, 2026	snapshot
Terms	4 hours ago	Sep 22, 2026	snapshot
Security page	4 hours ago	Sep 22, 2026	snapshot
security.txt	4 hours ago	Sep 22, 2026	snapshot
Status page	4 hours ago	Sep 27, 2026	snapshot

Subprocessors

None extracted.

Listed as a subprocessor by (5)

Purposes as each company states them.

Alcide alcide.io
ConfigCat configcat.com Product analytics services
GoDaddy godaddy.com Provide and manage network solutions as part of our network; including metadata analysis.
Rapid7 rapid7.com
TierPoint tierpoint.com Products & Services

Security record

What public security catalogs list for Cisco, in their words.

Known exploited vulnerabilities

99 vulnerabilities in Cisco's software that CISA lists as exploited in the wild.

CVE	Product	Vulnerability	Listed
CVE-2026-76460	Identity Services Engine	Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability	Sep 16, 2026 evidence
CVE-2026-76461	Secure Email Gateway	Cisco Secure Email Gateway SQL Injection Vulnerability	Sep 14, 2026 evidence
CVE-2026-20079	Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management	Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability	Sep 9, 2026 evidence
CVE-2026-20349	Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability	Aug 11, 2026 evidence
CVE-2026-20316	Secure Firewall Management Center (FMC)	Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability used by ransomware	Jul 29, 2026 evidence
CVE-2008-4128	IOS	Cisco IOS Cross-Site Request Forgery Vulnerability	Jul 13, 2026 evidence
CVE-2026-20230	Unified Communications Manager	Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability	Jun 25, 2026 evidence
CVE-2026-20262	Catalyst SD-WAN Manager	Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability	Jun 15, 2026 evidence
CVE-2026-20245	Catalyst SD-WAN Manager	Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability	Jun 9, 2026 evidence
CVE-2026-20182	Catalyst SD-WAN	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability	May 14, 2026 evidence

89 more

CVE	Product	Vulnerability	Listed
CVE-2026-20122	Catalyst SD-WAN Manger	Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability	Apr 20, 2026 evidence
CVE-2026-20128	Catalyst SD-WAN Manager	Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability	Apr 20, 2026 evidence
CVE-2026-20133	Catalyst SD-WAN Manager	Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability	Apr 20, 2026 evidence
CVE-2026-20131	Secure Firewall Management Center (FMC)	Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability used by ransomware	Mar 19, 2026 evidence
CVE-2022-20775	SD-WAN	Cisco SD-WAN Path Traversal Vulnerability	Feb 25, 2026 evidence
CVE-2026-20127	Catalyst SD-WAN Controller and Manager	Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability	Feb 25, 2026 evidence
CVE-2026-20045	Unified Communications Manager	Cisco Unified Communications Products Code Injection Vulnerability	Jan 21, 2026 evidence
CVE-2025-20393	Multiple Products	Cisco Multiple Products Improper Input Validation Vulnerability	Dec 17, 2025 evidence
CVE-2025-20352	IOS and IOS XE	Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability	Sep 29, 2025 evidence
CVE-2025-20333	Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability	Sep 25, 2025 evidence
CVE-2025-20362	Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense	Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability	Sep 25, 2025 evidence
CVE-2025-20281	Identity Services Engine	Cisco Identity Services Engine Injection Vulnerability	Jul 28, 2025 evidence
CVE-2025-20337	Identity Services Engine	Cisco Identity Services Engine Injection Vulnerability	Jul 28, 2025 evidence
CVE-2024-20439	Smart Licensing Utility	Cisco Smart Licensing Utility Static Credential Vulnerability	Mar 31, 2025 evidence
CVE-2023-20118	Small Business RV Series Routers	Cisco Small Business RV Series Routers Command Injection Vulnerability	Mar 3, 2025 evidence
CVE-2014-2120	Adaptive Security Appliance (ASA)	Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability	Nov 12, 2024 evidence
CVE-2024-20481	Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	Cisco ASA and FTD Denial-of-Service Vulnerability	Oct 24, 2024 evidence
CVE-2024-20399	NX-OS	Cisco NX-OS Command Injection Vulnerability	Jul 2, 2024 evidence
CVE-2024-20353	Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	Cisco ASA and FTD Denial of Service Vulnerability	Apr 24, 2024 evidence
CVE-2024-20359	Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	Cisco ASA and FTD Privilege Escalation Vulnerability	Apr 24, 2024 evidence
CVE-2020-3259	Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	Cisco ASA and FTD Information Disclosure Vulnerability used by ransomware	Feb 15, 2024 evidence
CVE-2023-20273	Cisco IOS XE Web UI	Cisco IOS XE Web UI Command Injection Vulnerability	Oct 23, 2023 evidence
CVE-2023-20198	IOS XE Web UI	Cisco IOS XE Web UI Privilege Escalation Vulnerability	Oct 16, 2023 evidence
CVE-2023-20109	IOS and IOS XE	Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability	Oct 10, 2023 evidence
CVE-2023-20269	Adaptive Security Appliance and Firepower Threat Defense	Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability used by ransomware	Sep 13, 2023 evidence
CVE-2004-1464	IOS	Cisco IOS Denial-of-Service Vulnerability	May 19, 2023 evidence
CVE-2016-6415	IOS, IOS XR, and IOS XE	Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability	May 19, 2023 evidence
CVE-2017-6742	IOS and IOS XE Software	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	Apr 19, 2023 evidence
CVE-2020-3153	AnyConnect Secure	Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability used by ransomware	Oct 24, 2022 evidence
CVE-2020-3433	AnyConnect Secure	Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability used by ransomware	Oct 24, 2022 evidence
CVE-2019-15271	RV Series Routers	Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability	Jun 8, 2022 evidence
CVE-2016-6366	Adaptive Security Appliance (ASA)	Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability	May 24, 2022 evidence
CVE-2016-6367	Adaptive Security Appliance (ASA)	Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability	May 24, 2022 evidence
CVE-2022-20821	IOS XR	Cisco IOS XR Open Port Vulnerability	May 23, 2022 evidence
CVE-2009-2055	IOS XR	Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability	Mar 25, 2022 evidence
CVE-2010-3035	IOS XR	Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability	Mar 25, 2022 evidence
CVE-2015-0666	Prime Data Center Network Manager (DCNM)	Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability	Mar 25, 2022 evidence
CVE-2017-3881	IOS and IOS XE	Cisco IOS and IOS XE Remote Code Execution Vulnerability	Mar 25, 2022 evidence
CVE-2018-0125	VPN Routers	Cisco VPN Routers Remote Code Execution Vulnerability	Mar 25, 2022 evidence
CVE-2018-0147	Secure Access Control System (ACS)	Cisco Secure Access Control System Java Deserialization Vulnerability	Mar 25, 2022 evidence
CVE-2017-12231	IOS software	Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2017-12232	IOS software	Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2017-12233	IOS software	Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2017-12234	IOS software	Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2017-12235	IOS software	Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2017-12237	IOS and IOS XE Software	Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2017-12238	Catalyst 6800 Series Switches	Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2017-12240	IOS and IOS XE Software	Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability	Mar 3, 2022 evidence
CVE-2017-12319	IOS XE Software	Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2017-6627	IOS and IOS XE Software	Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2017-6663	IOS and IOS XE Software	Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2017-6736	IOS and IOS XE Software	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	Mar 3, 2022 evidence
CVE-2017-6737	IOS and IOS XE Software	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	Mar 3, 2022 evidence
CVE-2017-6738	IOS and IOS XE Software	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	Mar 3, 2022 evidence
CVE-2017-6739	IOS and IOS XE Software	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	Mar 3, 2022 evidence
CVE-2017-6740	IOS and IOS XE Software	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	Mar 3, 2022 evidence
CVE-2017-6743	IOS and IOS XE Software	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	Mar 3, 2022 evidence
CVE-2017-6744	IOS software	Cisco IOS Software SNMP Remote Code Execution Vulnerability	Mar 3, 2022 evidence
CVE-2018-0151	IOS and IOS XE Software	Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability	Mar 3, 2022 evidence
CVE-2018-0154	IOS Software	Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2018-0155	Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches	Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2018-0156	IOS Software and Cisco IOS XE Software	Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2018-0158	IOS Software and Cisco IOS XE Software	Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability	Mar 3, 2022 evidence
CVE-2018-0159	IOS Software and Cisco IOS XE Software	Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2018-0161	IOS Software	Cisco IOS Software Resource Management Errors Vulnerability	Mar 3, 2022 evidence
CVE-2018-0167	IOS, XR, and XE Software	Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability	Mar 3, 2022 evidence
CVE-2018-0172	IOS and IOS XE Software	Cisco IOS and IOS XE Software Improper Input Validation Vulnerability	Mar 3, 2022 evidence
CVE-2018-0173	IOS and IOS XE Software	Cisco IOS and IOS XE Software Improper Input Validation Vulnerability	Mar 3, 2022 evidence
CVE-2018-0174	IOS XE Software	Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability	Mar 3, 2022 evidence
CVE-2018-0175	IOS, XR, and XE Software	Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability	Mar 3, 2022 evidence
CVE-2018-0179	IOS Software	Cisco IOS Software Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2018-0180	IOS Software	Cisco IOS Software Denial-of-Service Vulnerability	Mar 3, 2022 evidence
CVE-2019-1652	Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers	Cisco Small Business Routers Improper Input Validation Vulnerability	Mar 3, 2022 evidence
CVE-2022-20699	Small Business RV160, RV260, RV340, and RV345 Series Routers	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	Mar 3, 2022 evidence
CVE-2022-20700	Small Business RV160, RV260, RV340, and RV345 Series Routers	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	Mar 3, 2022 evidence
CVE-2022-20701	Small Business RV160, RV260, RV340, and RV345 Series Routers	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	Mar 3, 2022 evidence
CVE-2022-20703	Small Business RV160, RV260, RV340, and RV345 Series Routers	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	Mar 3, 2022 evidence
CVE-2022-20708	Small Business RV160, RV260, RV340, and RV345 Series Routers	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	Mar 3, 2022 evidence
CVE-2018-0171	IOS and IOS XE	Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability	Nov 3, 2021 evidence
CVE-2018-0296	Adaptive Security Appliance (ASA)	Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability	Nov 3, 2021 evidence
CVE-2019-1653	Small Business RV320 and RV325 Routers	Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability	Nov 3, 2021 evidence
CVE-2020-3118	IOS XR	Cisco IOS XR Software Discovery Protocol Format String Vulnerability	Nov 3, 2021 evidence
CVE-2020-3161	Cisco IP Phones	Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability	Nov 3, 2021 evidence
CVE-2020-3452	Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	Cisco ASA and FTD Read-Only Path Traversal Vulnerability	Nov 3, 2021 evidence
CVE-2020-3566	IOS XR	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability	Nov 3, 2021 evidence
CVE-2020-3569	IOS XR	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability	Nov 3, 2021 evidence
CVE-2020-3580	Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability used by ransomware	Nov 3, 2021 evidence
CVE-2021-1497	HyperFlex HX	Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability	Nov 3, 2021 evidence
CVE-2021-1498	HyperFlex HX	Cisco HyperFlex HX Data Platform Command Injection Vulnerability	Nov 3, 2021 evidence

Source: CISA Known Exploited Vulnerabilities catalog.

Federal contracts

By funding agency. UEI LQJKCX84CJB4 , V3JJMWE4SRC6 failing

None found.

Prime awards and subawards reported by prime contractors. Purchases through a reseller name the reseller, not the vendor.

Changes

None since tracking began.