# Vulnerabilities published in 2018 - [CVE-2018-0398](https://insights.sbomify.com/CVE-2018-0398/): Server-side request forgery in Cisco Finesse unknown (critical 9.8) - [CVE-2018-0397](https://insights.sbomify.com/CVE-2018-0397/): Denial of service in Cisco AMP for Endpoints Mac Connector unknown (medium 5.9) - [CVE-2018-0396](https://insights.sbomify.com/CVE-2018-0396/): Cross-site scripting in Cisco Unified Communications Manager IM And Presence Service unknown (medium 6.1) - [CVE-2018-0395](https://insights.sbomify.com/CVE-2018-0395/): Cisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability (high 8.8) - [CVE-2018-0394](https://insights.sbomify.com/CVE-2018-0394/): Command injection in Cisco Cloud Services Platform 2100 unknown (high 8.8) - [CVE-2018-0393](https://insights.sbomify.com/CVE-2018-0393/): Missing authorization in Cisco Policy Suite unknown (medium 6.5) - [CVE-2018-0392](https://insights.sbomify.com/CVE-2018-0392/): Misconfiguration in Cisco Policy Suite unknown (medium 5.5) - [CVE-2018-0391](https://insights.sbomify.com/CVE-2018-0391/): Denial of service in Cisco Prime Collaboration Provisioning unknown (medium 6.5) - [CVE-2018-0390](https://insights.sbomify.com/CVE-2018-0390/): Cross-site scripting in Cisco Webex unknown (medium 6.1) - [CVE-2018-0389](https://insights.sbomify.com/CVE-2018-0389/): Cisco Small Business SPA514G IP Phones SIP Denial of Service Vulnerability (high 7.5) - [CVE-2018-0388](https://insights.sbomify.com/CVE-2018-0388/): Cisco Wireless LAN Controller Software Cross-Site Scripting Vulnerability (medium 4.8) - [CVE-2018-0387](https://insights.sbomify.com/CVE-2018-0387/): Code injection in Cisco Webex Teams unknown (high 8.8) - [CVE-2018-0386](https://insights.sbomify.com/CVE-2018-0386/): Cross-site scripting in Unified Communications Domain Manager Software (medium 6.1) - [CVE-2018-0385](https://insights.sbomify.com/CVE-2018-0385/): Denial of service in Cisco Firepower unknown (high 7.5) - [CVE-2018-0384](https://insights.sbomify.com/CVE-2018-0384/): Security feature bypass in Cisco FireSIGHT unknown (medium 5.8) - [CVE-2018-0383](https://insights.sbomify.com/CVE-2018-0383/): Security feature bypass in Cisco FireSIGHT unknown (high 8.6) - [CVE-2018-0382](https://insights.sbomify.com/CVE-2018-0382/): Cisco Wireless LAN Controller Software Session Hijacking Vulnerability (medium 5.3) - [CVE-2018-0381](https://insights.sbomify.com/CVE-2018-0381/): Cisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerability (medium 5.8) - [CVE-2018-0380](https://insights.sbomify.com/CVE-2018-0380/): Denial of service in Cisco Webex Network Recording Players unknown (medium 5.5) - [CVE-2018-0379](https://insights.sbomify.com/CVE-2018-0379/): Memory corruption in Cisco Webex Network Recording Players unknown (high 7.8) - [CVE-2018-0378](https://insights.sbomify.com/CVE-2018-0378/): Denial of service in Cisco NX-OS Software for Nexus 6000 Series (high 8.6) - [CVE-2018-0377](https://insights.sbomify.com/CVE-2018-0377/): Missing authorization in Cisco Policy Suite unknown (critical 9.8) - [CVE-2018-0376](https://insights.sbomify.com/CVE-2018-0376/): Missing authorization in Cisco Policy Suite unknown (critical 9.8) - [CVE-2018-0375](https://insights.sbomify.com/CVE-2018-0375/): Hardcoded credentials in Cisco Policy Suite unknown (critical 9.8) - [CVE-2018-0374](https://insights.sbomify.com/CVE-2018-0374/): Missing authorization in Cisco Policy Suite unknown (critical 9.8) - [CVE-2018-0373](https://insights.sbomify.com/CVE-2018-0373/): Denial of service in Cisco AnyConnect Secure Mobility Client unknown (medium 5.5) - [CVE-2018-0372](https://insights.sbomify.com/CVE-2018-0372/): Denial of service in Cisco Nexus 9000 Series unknown (high 7.5) - [CVE-2018-0371](https://insights.sbomify.com/CVE-2018-0371/): Denial of service in Cisco Meeting Server unknown (medium 6.5) - [CVE-2018-0370](https://insights.sbomify.com/CVE-2018-0370/): Denial of service in Cisco Firepower unknown (high 7.5) - [CVE-2018-0369](https://insights.sbomify.com/CVE-2018-0369/): Denial of service in Cisco StarOS unknown (high 8.6) - [CVE-2018-0368](https://insights.sbomify.com/CVE-2018-0368/): Information disclosure in Cisco Digital Network Architecture Center unknown (high 7.8) - [CVE-2018-0367](https://insights.sbomify.com/CVE-2018-0367/): Cross-site scripting in Registered Envelope Service (medium 5.4) - [CVE-2018-0366](https://insights.sbomify.com/CVE-2018-0366/): Cross-site scripting in Cisco Web Security Appliance unknown (medium 6.1) - [CVE-2018-0365](https://insights.sbomify.com/CVE-2018-0365/): Cross-site request forgery in Cisco Firepower Management Center unknown (high 8.8) - [CVE-2018-0364](https://insights.sbomify.com/CVE-2018-0364/): Cross-site request forgery in Cisco Unified Communications Domain Manager unknown (high 8.8) - [CVE-2018-0363](https://insights.sbomify.com/CVE-2018-0363/): Cross-site request forgery in Cisco Unified Communications Manager IM & Presence Service unknown (high 8.8) - [CVE-2018-0362](https://insights.sbomify.com/CVE-2018-0362/): Auth bypass in Cisco 5000 Series Enterprise Network Compute System and Cisco UCS E-Series Servers unknown (medium 4.3) - [CVE-2018-0361](https://insights.sbomify.com/CVE-2018-0361/): Denial of service in ClamAV before 0.100.1 unknown (low 3.3) - [CVE-2018-0360](https://insights.sbomify.com/CVE-2018-0360/): Integer overflow in ClamAV before 0.100.1 unknown (medium 5.5) - [CVE-2018-0359](https://insights.sbomify.com/CVE-2018-0359/): Auth bypass in Cisco Meeting Server unknown (medium 5.5) - [CVE-2018-0358](https://insights.sbomify.com/CVE-2018-0358/): Denial of service in Cisco TelePresence Video Communication Server unknown (high 7.5) - [CVE-2018-0357](https://insights.sbomify.com/CVE-2018-0357/): Cross-site scripting in Cisco WebEx unknown (medium 6.1) - [CVE-2018-0356](https://insights.sbomify.com/CVE-2018-0356/): Cross-site scripting in Cisco WebEx unknown (medium 6.1) - [CVE-2018-0355](https://insights.sbomify.com/CVE-2018-0355/): Other in Cisco Unified Communications Manager unknown (medium 6.1) - [CVE-2018-0354](https://insights.sbomify.com/CVE-2018-0354/): Cross-site scripting in Cisco Unity Connection unknown (medium 6.1) - [CVE-2018-0353](https://insights.sbomify.com/CVE-2018-0353/): Security feature bypass in Cisco Web Security Appliance unknown (high 7.5) - [CVE-2018-0352](https://insights.sbomify.com/CVE-2018-0352/): Privilege escalation in Cisco Wide Area Application Services unknown (medium 6.7) - [CVE-2018-0351](https://insights.sbomify.com/CVE-2018-0351/): Command injection in Cisco SD-WAN Solution unknown (high 7.8) - [CVE-2018-0350](https://insights.sbomify.com/CVE-2018-0350/): Command injection in Cisco SD-WAN Solution unknown (high 8.8) - [CVE-2018-0349](https://insights.sbomify.com/CVE-2018-0349/): Command injection in Cisco SD-WAN Solution unknown (critical 9.8) - [CVE-2018-0348](https://insights.sbomify.com/CVE-2018-0348/): Command injection in Cisco SD-WAN Solution unknown (high 7.2) - [CVE-2018-0347](https://insights.sbomify.com/CVE-2018-0347/): Command injection in Cisco SD-WAN Solution unknown (high 7.8) - [CVE-2018-0346](https://insights.sbomify.com/CVE-2018-0346/): Memory corruption in Cisco SD-WAN Solution unknown (high 7.5) - [CVE-2018-0345](https://insights.sbomify.com/CVE-2018-0345/): Command injection in Cisco SD-WAN Solution unknown (high 8.8) - [CVE-2018-0344](https://insights.sbomify.com/CVE-2018-0344/): Command injection in Cisco SD-WAN Solution unknown (high 7.2) - [CVE-2018-0343](https://insights.sbomify.com/CVE-2018-0343/): Privilege escalation in Cisco SD-WAN Solution unknown (high 8.8) - [CVE-2018-0342](https://insights.sbomify.com/CVE-2018-0342/): Memory corruption in Cisco SD-WAN Solution unknown (medium 6.7) - [CVE-2018-0341](https://insights.sbomify.com/CVE-2018-0341/): Command injection in Cisco IP Phone 6800, 7800, and 8800 unknown (high 8.8) - [CVE-2018-0340](https://insights.sbomify.com/CVE-2018-0340/): Cross-site scripting in Cisco Unified Communications Manager unknown (medium 5.4) - [CVE-2018-0339](https://insights.sbomify.com/CVE-2018-0339/): Cross-site scripting in Cisco Identity Services Engine unknown (medium 6.1) - [CVE-2018-0338](https://insights.sbomify.com/CVE-2018-0338/): Command injection in Cisco Unified Computing System unknown (high 7.8) - [CVE-2018-0337](https://insights.sbomify.com/CVE-2018-0337/): Command injection in Cisco NX-OS unknown (high 7.8) - [CVE-2018-0336](https://insights.sbomify.com/CVE-2018-0336/): Privilege escalation in Cisco Prime Collaboration Provisioning unknown (high 8.8) - [CVE-2018-0335](https://insights.sbomify.com/CVE-2018-0335/): Information disclosure in Cisco Prime Collaboration Provisioning unknown (high 7.8) - [CVE-2018-0334](https://insights.sbomify.com/CVE-2018-0334/): Security feature bypass in Cisco AnyConnect Secure Mobility Client unknown (medium 4.8) - [CVE-2018-0333](https://insights.sbomify.com/CVE-2018-0333/): Security feature bypass in Cisco FireSIGHT unknown (medium 5.8) - [CVE-2018-0332](https://insights.sbomify.com/CVE-2018-0332/): Denial of service in Cisco Unified IP Phone Software unknown (high 7.5) - [CVE-2018-0331](https://insights.sbomify.com/CVE-2018-0331/): Denial of service in Cisco FXOS, NX-OS, and UCS Manager unknown (medium 6.5) - [CVE-2018-0330](https://insights.sbomify.com/CVE-2018-0330/): Privilege escalation in Cisco NX-OS unknown (high 8.8) - [CVE-2018-0329](https://insights.sbomify.com/CVE-2018-0329/): Hardcoded credentials in Cisco Wide Area Application Services unknown (medium 5.3) - [CVE-2018-0328](https://insights.sbomify.com/CVE-2018-0328/): Cross-site scripting in Cisco Unified Communications Manager and Cisco Unified Presence (medium 6.1) - [CVE-2018-0327](https://insights.sbomify.com/CVE-2018-0327/): Cross-site scripting in Cisco Identity Services Engine (medium 6.1) - [CVE-2018-0326](https://insights.sbomify.com/CVE-2018-0326/): Security feature bypass in Cisco TelePresence Server (medium 6.1) - [CVE-2018-0325](https://insights.sbomify.com/CVE-2018-0325/): Denial of service in Cisco IP Phone 7800 Series and 8800 Series (high 7.5) - [CVE-2018-0324](https://insights.sbomify.com/CVE-2018-0324/): Command injection in Cisco Enterprise NFV Infrastructure Software (medium 6.7) - [CVE-2018-0323](https://insights.sbomify.com/CVE-2018-0323/): Path traversal in Cisco Enterprise NFV Infrastructure Software (medium 6.5) - [CVE-2018-0322](https://insights.sbomify.com/CVE-2018-0322/): Missing authorization in Cisco Prime Collaboration Provisioning unknown (high 8.8) - [CVE-2018-0321](https://insights.sbomify.com/CVE-2018-0321/): Auth bypass in Cisco Prime Collaboration Provisioning unknown (critical 9.8) - [CVE-2018-0320](https://insights.sbomify.com/CVE-2018-0320/): SQL injection in Cisco Prime Collaboration Provisioning unknown (critical 9.8) - [CVE-2018-0319](https://insights.sbomify.com/CVE-2018-0319/): Auth bypass in Cisco Prime Collaboration Provisioning unknown (critical 9.8) - [CVE-2018-0318](https://insights.sbomify.com/CVE-2018-0318/): Auth bypass in Cisco Prime Collaboration Provisioning unknown (critical 9.8) - [CVE-2018-0317](https://insights.sbomify.com/CVE-2018-0317/): Privilege escalation in Cisco Prime Collaboration Provisioning unknown (high 8.8) - [CVE-2018-0316](https://insights.sbomify.com/CVE-2018-0316/): Denial of service in Cisco IP Phone 6800, 7800, and 8800 Series unknown (high 7.5) - [CVE-2018-0315](https://insights.sbomify.com/CVE-2018-0315/): Memory corruption in Cisco IOS XE unknown (critical 9.8) - [CVE-2018-0314](https://insights.sbomify.com/CVE-2018-0314/): Memory corruption in Cisco FXOS and NX-OS unknown (critical 9.8) - [CVE-2018-0313](https://insights.sbomify.com/CVE-2018-0313/): Command injection in Cisco NX-OS unknown (high 8.8) - [CVE-2018-0312](https://insights.sbomify.com/CVE-2018-0312/): Memory corruption in Cisco FXOS and NX-OS unknown (critical 9.8) - [CVE-2018-0311](https://insights.sbomify.com/CVE-2018-0311/): Memory corruption in Cisco FXOS and NX-OS unknown (high 7.5) - [CVE-2018-0310](https://insights.sbomify.com/CVE-2018-0310/): Memory corruption in Cisco FXOS and NX-OS unknown (critical 9.8) - [CVE-2018-0309](https://insights.sbomify.com/CVE-2018-0309/): Denial of service in Cisco Nexus 3000 and 9000 unknown (high 7.7) - [CVE-2018-0308](https://insights.sbomify.com/CVE-2018-0308/): Memory corruption in Cisco FXOS and NX-OS unknown (critical 9.8) - [CVE-2018-0307](https://insights.sbomify.com/CVE-2018-0307/): Command injection in Cisco NX-OS unknown (high 7.8) - [CVE-2018-0306](https://insights.sbomify.com/CVE-2018-0306/): Command injection in Cisco NX-OS unknown (high 7.8) - [CVE-2018-0305](https://insights.sbomify.com/CVE-2018-0305/): Null dereference in Cisco FXOS and NX-OS unknown (high 8.6) - [CVE-2018-0304](https://insights.sbomify.com/CVE-2018-0304/): Memory corruption in Cisco FXOS and NX-OS unknown (critical 9.8) - [CVE-2018-0303](https://insights.sbomify.com/CVE-2018-0303/): Memory corruption in Cisco FXOS and NX-OS unknown (high 8.8) - [CVE-2018-0302](https://insights.sbomify.com/CVE-2018-0302/): Memory corruption in Cisco FXOS Software and UCS Fabric Interconnect unknown (high 7.8) - [CVE-2018-0301](https://insights.sbomify.com/CVE-2018-0301/): Memory corruption in Cisco NX-OS unknown (critical 9.8) - [CVE-2018-0300](https://insights.sbomify.com/CVE-2018-0300/): Path traversal in Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance unknown (high 7.2) - [CVE-2018-0299](https://insights.sbomify.com/CVE-2018-0299/): Denial of service in Cisco Nexus 4000 unknown (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/160/