# Vulnerabilities published in 2018 - [CVE-2018-0298](https://insights.sbomify.com/CVE-2018-0298/): Memory corruption in Cisco FXOS Software and UCS Fabric Interconnect unknown (high 7.5) - [CVE-2018-0297](https://insights.sbomify.com/CVE-2018-0297/): Security feature bypass in Cisco Firepower Threat Defense Software (medium 5.8) - [CVE-2018-0296](https://insights.sbomify.com/CVE-2018-0296/): Cisco Adaptive Security Appliance (ASA) Denial-of-Service (high 7.5, exploited in the wild) - [CVE-2018-0295](https://insights.sbomify.com/CVE-2018-0295/): Denial of service in Cisco NX-OS unknown (high 7.5) - [CVE-2018-0294](https://insights.sbomify.com/CVE-2018-0294/): Privilege escalation in Cisco FXOS and NX-OS unknown (medium 6.7) - [CVE-2018-0293](https://insights.sbomify.com/CVE-2018-0293/): Privilege escalation in Cisco NX-OS unknown (high 8.8) - [CVE-2018-0292](https://insights.sbomify.com/CVE-2018-0292/): Memory corruption in Cisco NX-OS unknown (high 8.8) - [CVE-2018-0291](https://insights.sbomify.com/CVE-2018-0291/): Denial of service in Cisco NX-OS unknown (medium 6.5) - [CVE-2018-0290](https://insights.sbomify.com/CVE-2018-0290/): Denial of service in Cisco SocialMiner Notification System (medium 5.3) - [CVE-2018-0289](https://insights.sbomify.com/CVE-2018-0289/): Cross-site scripting in Cisco Identity Services Engine (medium 6.1) - [CVE-2018-0288](https://insights.sbomify.com/CVE-2018-0288/): Information disclosure in Cisco WebEx Recording Format Player (medium 5.3) - [CVE-2018-0287](https://insights.sbomify.com/CVE-2018-0287/): Other in Cisco WebEx Advanced Recording Format Player (high 8.8) - [CVE-2018-0286](https://insights.sbomify.com/CVE-2018-0286/): Denial of service in Cisco IOS XR (medium 5.3) - [CVE-2018-0285](https://insights.sbomify.com/CVE-2018-0285/): Denial of service in Cisco Prime Service Catalog (medium 6.5) - [CVE-2018-0284](https://insights.sbomify.com/CVE-2018-0284/): Cisco Meraki Local Status Page Privilege Escalation Vulnerability (medium 6.5) - [CVE-2018-0283](https://insights.sbomify.com/CVE-2018-0283/): Denial of service in Cisco Firepower System Software (medium 5.8) - [CVE-2018-0282](https://insights.sbomify.com/CVE-2018-0282/): Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability (medium 6.8) - [CVE-2018-0281](https://insights.sbomify.com/CVE-2018-0281/): Denial of service in Cisco Firepower System Software (medium 5.8) - [CVE-2018-0280](https://insights.sbomify.com/CVE-2018-0280/): Denial of service in Cisco Meeting Server Media Services (high 7.5) - [CVE-2018-0279](https://insights.sbomify.com/CVE-2018-0279/): Command injection in Cisco Enterprise NFV Infrastructure Software (high 8.8) - [CVE-2018-0278](https://insights.sbomify.com/CVE-2018-0278/): Information disclosure in Cisco Firepower System Software (medium 6.5) - [CVE-2018-0277](https://insights.sbomify.com/CVE-2018-0277/): Denial of service in Cisco Identity Services Engine (high 8.6) - [CVE-2018-0276](https://insights.sbomify.com/CVE-2018-0276/): Cross-site scripting in Cisco WebEx Connect IM (medium 6.1) - [CVE-2018-0275](https://insights.sbomify.com/CVE-2018-0275/): Misconfiguration in Cisco Identity Services Engine (medium 6.7) - [CVE-2018-0274](https://insights.sbomify.com/CVE-2018-0274/): Command injection in Cisco Network Services Orchestrator unknown (high 8.8) - [CVE-2018-0273](https://insights.sbomify.com/CVE-2018-0273/): Denial of service in Cisco StarOS IPsec Manager (medium 5.3) - [CVE-2018-0272](https://insights.sbomify.com/CVE-2018-0272/): Denial of service in Cisco Firepower Threat Defense (medium 5.9) - [CVE-2018-0271](https://insights.sbomify.com/CVE-2018-0271/): Auth bypass in Cisco Digital Network Architecture Center (critical 9.8) - [CVE-2018-0270](https://insights.sbomify.com/CVE-2018-0270/): Cross-site request forgery in Cisco IoT Field Network Director (high 8.8) - [CVE-2018-0269](https://insights.sbomify.com/CVE-2018-0269/): Misconfiguration in Cisco DNA Center (medium 4.3) - [CVE-2018-0268](https://insights.sbomify.com/CVE-2018-0268/): Misconfiguration in Cisco Digital Network Architecture Center (critical 10.0) - [CVE-2018-0267](https://insights.sbomify.com/CVE-2018-0267/): Information disclosure in Cisco Unified Communications Manager (medium 6.5) - [CVE-2018-0266](https://insights.sbomify.com/CVE-2018-0266/): Information disclosure in Cisco Unified Communications Manager (medium 4.3) - [CVE-2018-0264](https://insights.sbomify.com/CVE-2018-0264/): Code injection in Cisco WebEx Advanced Recording Format file players (critical 9.6) - [CVE-2018-0263](https://insights.sbomify.com/CVE-2018-0263/): Misconfiguration in Cisco Meeting Server unknown (high 7.4) - [CVE-2018-0262](https://insights.sbomify.com/CVE-2018-0262/): Misconfiguration in Cisco Meeting Server (high 8.1) - [CVE-2018-0260](https://insights.sbomify.com/CVE-2018-0260/): Missing authorization in Cisco MATE Live (medium 5.3) - [CVE-2018-0259](https://insights.sbomify.com/CVE-2018-0259/): Cross-site request forgery in Cisco MATE Collector (high 8.8) - [CVE-2018-0258](https://insights.sbomify.com/CVE-2018-0258/): File upload in Cisco Prime File Upload Servlet (critical 9.8) - [CVE-2018-0257](https://insights.sbomify.com/CVE-2018-0257/): Denial of service in Cisco cBR Series Converged Broadband Routers (medium 4.3) - [CVE-2018-0256](https://insights.sbomify.com/CVE-2018-0256/): Denial of service in Cisco Packet Data Network Gateway (medium 5.8) - [CVE-2018-0255](https://insights.sbomify.com/CVE-2018-0255/): Cross-site request forgery in Cisco Industrial Ethernet Switches (high 8.8) - [CVE-2018-0254](https://insights.sbomify.com/CVE-2018-0254/): Security feature bypass in Cisco Firepower System Software (medium 5.3) - [CVE-2018-0253](https://insights.sbomify.com/CVE-2018-0253/): Command injection in Cisco Secure Access Control System (critical 9.8) - [CVE-2018-0252](https://insights.sbomify.com/CVE-2018-0252/): Memory corruption in Cisco Wireless LAN Controller (high 8.6) - [CVE-2018-0251](https://insights.sbomify.com/CVE-2018-0251/): Cross-site scripting in Cisco Adaptive Security Appliance (medium 6.1) - [CVE-2018-0250](https://insights.sbomify.com/CVE-2018-0250/): Security feature bypass in Cisco Aironet Access Points (medium 4.1) - [CVE-2018-0249](https://insights.sbomify.com/CVE-2018-0249/): Denial of service in Cisco Aironet 1800 Series Access Point (medium 4.3) - [CVE-2018-0248](https://insights.sbomify.com/CVE-2018-0248/): Cisco Wireless LAN Controller Software GUI Configuration Denial of Service Vulnerabilities (medium 6.8) - [CVE-2018-0247](https://insights.sbomify.com/CVE-2018-0247/): Auth bypass in Cisco Wireless LAN Controller and Aironet Access Points (medium 4.7) - [CVE-2018-0245](https://insights.sbomify.com/CVE-2018-0245/): Information disclosure in Cisco 5500 and 8500 Series Wireless LAN Controller (medium 5.3) - [CVE-2018-0244](https://insights.sbomify.com/CVE-2018-0244/): Security feature bypass in Cisco Firepower System Software (medium 5.8) - [CVE-2018-0243](https://insights.sbomify.com/CVE-2018-0243/): Security feature bypass in Cisco Firepower System Software (medium 5.8) - [CVE-2018-0242](https://insights.sbomify.com/CVE-2018-0242/): Cross-site scripting in Cisco Adaptive Security Appliance (medium 6.1) - [CVE-2018-0241](https://insights.sbomify.com/CVE-2018-0241/): Denial of service in Cisco IOS XR (high 7.4) - [CVE-2018-0240](https://insights.sbomify.com/CVE-2018-0240/): Denial of service in Cisco Adaptive Security Appliance (high 8.6) - [CVE-2018-0239](https://insights.sbomify.com/CVE-2018-0239/): Denial of service in Cisco StarOS (high 7.5) - [CVE-2018-0238](https://insights.sbomify.com/CVE-2018-0238/): Auth bypass in Cisco UCS Director (critical 9.9) - [CVE-2018-0237](https://insights.sbomify.com/CVE-2018-0237/): Security feature bypass in Cisco AMP for Endpoints (medium 5.8) - [CVE-2018-0235](https://insights.sbomify.com/CVE-2018-0235/): Denial of service in Cisco Wireless LAN Controller (high 7.4) - [CVE-2018-0234](https://insights.sbomify.com/CVE-2018-0234/): Denial of service in Cisco Aironet 1810, 1830, and 1850 Series Access Points (high 8.6) - [CVE-2018-0233](https://insights.sbomify.com/CVE-2018-0233/): Denial of service in Cisco Firepower Detection Engine (high 8.6) - [CVE-2018-0231](https://insights.sbomify.com/CVE-2018-0231/): Memory corruption in Cisco Adaptive Security Appliance (high 8.6) - [CVE-2018-0230](https://insights.sbomify.com/CVE-2018-0230/): Denial of service in Cisco Firepower 2100 Series Security Appliances (high 8.6) - [CVE-2018-0229](https://insights.sbomify.com/CVE-2018-0229/): Auth bypass in Cisco ASA Software, FTD Software, and AnyConnect Secure Mobility Client (medium 6.5) - [CVE-2018-0228](https://insights.sbomify.com/CVE-2018-0228/): Denial of service in Cisco Adaptive Security Appliance (high 8.6) - [CVE-2018-0227](https://insights.sbomify.com/CVE-2018-0227/): Security feature bypass in Cisco Adaptive Security Appliance (high 7.5) - [CVE-2018-0226](https://insights.sbomify.com/CVE-2018-0226/): Privilege escalation in Cisco Aironet 1800, 2800, and 3800 Series Access Points (high 7.5) - [CVE-2018-0225](https://insights.sbomify.com/CVE-2018-0225/): SQL injection in Cisco AppDynamics App iQ Platform before 4.4.3.10598 (HF4) unknown (critical 9.8) - [CVE-2018-0224](https://insights.sbomify.com/CVE-2018-0224/): Command injection in Cisco StarOS (medium 6.7) - [CVE-2018-0223](https://insights.sbomify.com/CVE-2018-0223/): Cross-site scripting in Cisco Security Manager (medium 6.1) - [CVE-2018-0222](https://insights.sbomify.com/CVE-2018-0222/): Hardcoded credentials in Cisco Digital Network Architecture Center (critical 10.0) - [CVE-2018-0221](https://insights.sbomify.com/CVE-2018-0221/): Command injection in Cisco Identity Services Engine (medium 6.7) - [CVE-2018-0220](https://insights.sbomify.com/CVE-2018-0220/): Cross-site scripting in Cisco Videoscape AnyRes Live (medium 5.4) - [CVE-2018-0219](https://insights.sbomify.com/CVE-2018-0219/): Cross-site scripting in Cisco UCS Director (medium 6.1) - [CVE-2018-0218](https://insights.sbomify.com/CVE-2018-0218/): XML external entity in Cisco Secure Access Control Server (low 3.3) - [CVE-2018-0217](https://insights.sbomify.com/CVE-2018-0217/): Command injection in Cisco StarOS (medium 6.7) - [CVE-2018-0216](https://insights.sbomify.com/CVE-2018-0216/): Cross-site request forgery in Cisco Identity Services Engine (medium 5.4) - [CVE-2018-0215](https://insights.sbomify.com/CVE-2018-0215/): Cross-site request forgery in Cisco Identity Services Engine (medium 6.3) - [CVE-2018-0214](https://insights.sbomify.com/CVE-2018-0214/): Command injection in Cisco Identity Services Engine (medium 5.3) - [CVE-2018-0213](https://insights.sbomify.com/CVE-2018-0213/): Privilege escalation in Cisco Identity Services Engine (high 8.8) - [CVE-2018-0212](https://insights.sbomify.com/CVE-2018-0212/): Cross-site scripting in Cisco Identity Services Engine (medium 6.1) - [CVE-2018-0211](https://insights.sbomify.com/CVE-2018-0211/): Denial of service in Cisco Identity Services Engine (medium 4.4) - [CVE-2018-0210](https://insights.sbomify.com/CVE-2018-0210/): Cross-site request forgery in Cisco Data Center Network Manager (high 8.8) - [CVE-2018-0209](https://insights.sbomify.com/CVE-2018-0209/): Denial of service in Cisco 550X Series Stackable Managed Switches (high 7.7) - [CVE-2018-0208](https://insights.sbomify.com/CVE-2018-0208/): Cross-site scripting in Cisco Registered Envelope Service (medium 5.4) - [CVE-2018-0207](https://insights.sbomify.com/CVE-2018-0207/): XML external entity in Cisco Secure Access Control Server (low 3.3) - [CVE-2018-0206](https://insights.sbomify.com/CVE-2018-0206/): Cross-site scripting in Cisco Unified Communications Manager (medium 6.1) - [CVE-2018-0205](https://insights.sbomify.com/CVE-2018-0205/): Cross-site scripting in Cisco Prime Collaboration Provisioning Tool (medium 6.1) - [CVE-2018-0204](https://insights.sbomify.com/CVE-2018-0204/): Denial of service in Cisco Prime Collaboration Provisioning Tool (high 7.5) - [CVE-2018-0203](https://insights.sbomify.com/CVE-2018-0203/): Other in Cisco Unity Connection (medium 5.3) - [CVE-2018-0202](https://insights.sbomify.com/CVE-2018-0202/): Memory corruption in ClamAV (medium 5.5) - [CVE-2018-0201](https://insights.sbomify.com/CVE-2018-0201/): Cross-site scripting in Cisco Jabber Client Framework (medium 5.4) - [CVE-2018-0200](https://insights.sbomify.com/CVE-2018-0200/): Cross-site scripting in Cisco Prime Service Catalog (medium 6.1) - [CVE-2018-0199](https://insights.sbomify.com/CVE-2018-0199/): Cross-site scripting in Cisco Jabber Client Framework (medium 6.1) - [CVE-2018-0198](https://insights.sbomify.com/CVE-2018-0198/): Information disclosure in Cisco Unified Communications Manager (medium 5.3) - [CVE-2018-0197](https://insights.sbomify.com/CVE-2018-0197/): Cisco IOS and IOS XE Software VLAN Trunking Protocol Denial of Service Vulnerability (medium 6.5) - [CVE-2018-0196](https://insights.sbomify.com/CVE-2018-0196/): Path traversal in Cisco IOS XE (medium 4.9) - [CVE-2018-0195](https://insights.sbomify.com/CVE-2018-0195/): Auth bypass in Cisco IOS XE (high 8.8) - [CVE-2018-0194](https://insights.sbomify.com/CVE-2018-0194/): Command injection in Cisco IOS XE (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/161/