ISC vendor intelligence
ISC Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting ISC products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 115
- Known exploited vulnerabilities affecting ISC products
- In CISA KEV
- 102
- Records also listed in the official catalog
- Beyond CISA KEV
- 13
- Additional exploited vulnerabilities absent from CISA KEV
- Sensor Observed
- 9
- ISC KEVs with sensor-observed exploitation activity
The catalog gap matters for ISC exposure
Thirteen of the 115 exploited ISC vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss 11% of this vendor portfolio.
- 89%
- Covered by CISA
- 11%
- Beyond CISA
- 48
- Product families
Attested ISC vulnerabilities
115 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2017-6742
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely... |
Cisco IOS XE Software, Universal Product | Confirmed | In CISA | 19 Apr 2023 |
|
CVE-2016-6415
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x,... |
IOS, IOS XE, IOS XR, PIX | Confirmed | In CISA | 19 May 2023 |
|
CVE-2004-1464
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP... |
IOS | Confirmed | In CISA | 19 May 2023 |
|
CVE-2023-20269
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)... |
Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense Software | Confirmed | In CISA | 13 Sep 2023 |
|
CVE-2023-20109
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an... |
IOS, Cisco IOS XE Software | Confirmed | In CISA | 10 Oct 2023 |
|
CVE-2023-20198
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are... |
Cisco IOS XE Software | Confirmed | In CISA | 16 Oct 2023 |
|
CVE-2023-20273
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges... |
Cisco IOS XE Software | Confirmed | In CISA | 23 Oct 2023 |
|
CVE-2020-3259
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability |
Cisco Adaptive Security Appliance (ASA) Software | Confirmed | In CISA | 15 Feb 2024 |
|
CVE-2024-20353
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)... |
Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense Software | Confirmed | In CISA | 24 Apr 2024 |
|
CVE-2024-20359
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive... |
Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense Software | Confirmed | In CISA | 24 Apr 2024 |
|
CVE-2024-20399
Cisco NX-OS Software CLI Command Injection Vulnerability |
Cisco NX-OS Software | Confirmed | In CISA | 02 Jul 2024 |
|
CVE-2024-20481
A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense... |
Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense Software | Confirmed | In CISA | 24 Oct 2024 |
|
CVE-2014-2120
Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to... |
Adaptive Security Appliance (ASA) Software | Confirmed | In CISA | 12 Nov 2024 |
|
CVE-2023-20118
A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could... |
Cisco Small Business RV Series Router Firmware | Confirmed | In CISA | 03 Mar 2025 |
|
CVE-2024-20439
A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a... |
Cisco Smart License Utility | Confirmed | In CISA | 31 Mar 2025 |
No ISC vulnerabilities match this search or filter.
Showing 15 of 15 on this page (115 ISC known exploited vulnerabilities).
Recurring weakness patterns
Input validation, restriction, and resource management errors account for 42 mapped occurrences across this ISC KEV portfolio.
CWE-20
Improper Input Validation
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-399
Resource Management Errors
CWE-121
Stack-based Buffer Overflow
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-287
Improper Authentication
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')