basicsecurity.net
Proof, not just disclosure.
Threats / Contributors / Cisco
Vendor security team contributor

Cisco

cited as evidence in 67 · CNA assigner on 92 of 95 known-exploited records. Every aggregate on this page is recomputed from the records listed below — each one already cited to its public source.

cisco.com ↗ · home of the cited advisories

95
records cited in
deterministic count
0
finder / reporter credits
CVE.org credits
92
CVE records catalogued (CNA)
assigner
32%
avg modeled exploit prob.
FIRST EPSS, 95/95
6%
ransomware-associated
6 of 95 · CISA flag
01

Known for

— recomputed from this contributor’s own records
SurfacesOperating system / kernel (45), Application / other (34), Edge / remote-access infra (16)
WeaknessMemory safety (18), Injection (13), Resource / availability (13), Authorization / access control (5), Authentication (5)
PortfolioCisco (92), GNU (1), Erlang (1), Splunk (1)
02

Narrative reach

— how far this contributor’s records carry an attacker, front door → lights out
1Front door
92reach this stage
2Keys to the kingdom
90reach this stage
3Lateral reach
67reach this stage
4Data at risk
12reach this stage
5Lights out
1reach this stage

Furthest any of these records carries an attacker: 5 · Lights out. 12 of 92 narrative-framed records reach data-at-risk or lights-out. (furthest-position idiom, reused from the landing map; the stage mapping is a model output over cited evidence.)

03

Recent highlights

— this contributor’s newest known-exploited records
04

Every record they’re cited in

— all 95, each linked to its cited source

This is the evidence behind every number above. Sorted ransomware-first, then by modeled exploit probability.

CVE-2020-3580Cisco85%RWKEVCVE-2020-3259Cisco72%RWKEVCVE-2020-3153Cisco28%RWKEVCVE-2026-20131Cisco28%RWKEVCVE-2023-20269Cisco22%RWKEVCVE-2020-3433Cisco10%RWKEVCVE-2021-1498Cisco100%KEVCVE-2020-3452Cisco100%KEVCVE-2021-1497Cisco100%KEVCVE-2018-0296Cisco100%KEVCVE-2019-1653Cisco100%KEVCVE-2014-6278GNU100%KEVCVE-2023-20198Cisco100%KEVCVE-2018-0171Cisco100%KEVCVE-2017-3881Cisco99%KEVCVE-2025-32433Erlang98%KEVCVE-2025-20281Cisco97%KEVCVE-2019-1652Cisco96%KEVCVE-2024-20439Cisco92%KEVCVE-2023-20273Cisco90%KEVCVE-2016-6415Cisco88%KEVCVE-2016-6366Cisco88%KEVCVE-2020-3161Cisco84%KEVCVE-2025-20362Cisco84%KEVCVE-2026-20182Cisco76%KEVCVE-2022-20699Cisco72%KEVCVE-2017-6736Cisco71%KEVCVE-2025-20337Cisco65%KEVCVE-2024-20353Cisco63%KEVCVE-2018-0125Cisco55%KEVCVE-2023-20118Cisco54%KEVCVE-2026-20127Cisco48%KEVCVE-2015-0666Cisco41%KEVCVE-2025-20352Cisco38%KEVCVE-2025-20333Cisco29%KEVCVE-2025-20393Cisco29%KEVCVE-2016-6367Cisco23%KEVCVE-2017-6742Cisco21%KEVCVE-2018-0147Cisco19%KEVCVE-2024-20359Cisco17%KEVCVE-2024-20481Cisco16%KEVCVE-2018-0151Cisco14%KEVCVE-2014-2120Cisco14%KEVCVE-2022-20708Cisco14%KEVCVE-2017-12240Cisco14%KEVCVE-2022-20775Cisco12%KEVCVE-2020-3118Cisco12%KEVCVE-2022-20821Cisco12%KEVCVE-2017-6740Cisco11%KEVCVE-2017-6737Cisco11%KEVCVE-2017-6738Cisco11%KEVCVE-2017-6739Cisco11%KEVCVE-2017-6743Cisco11%KEVCVE-2026-20253Splunk10%KEVCVE-2022-20701Cisco9%KEVCVE-2026-20133Cisco9%KEVCVE-2022-20703Cisco9%KEVCVE-2018-0156Cisco8%KEVCVE-2018-0172Cisco8%KEVCVE-2018-0155Cisco8%KEVCVE-2018-0173Cisco8%KEVCVE-2018-0174Cisco8%KEVCVE-2018-0158Cisco7%KEVCVE-2017-6744Cisco7%KEVCVE-2018-0154Cisco7%KEVCVE-2017-12231Cisco7%KEVCVE-2017-12233Cisco7%KEVCVE-2017-12234Cisco7%KEVCVE-2017-12235Cisco7%KEVCVE-2017-12237Cisco7%KEVCVE-2018-0159Cisco7%KEVCVE-2026-20122Cisco6%KEVCVE-2017-6627Cisco6%KEVCVE-2019-15271Cisco6%KEVCVE-2010-3035Cisco6%KEVCVE-2022-20700Cisco5%KEVCVE-2017-12319Cisco5%KEVCVE-2004-1464Cisco5%KEVCVE-2018-0179Cisco5%KEVCVE-2018-0180Cisco5%KEVCVE-2026-20128Cisco5%KEVCVE-2026-20045Cisco4%KEVCVE-2018-0161Cisco4%KEVCVE-2020-3566Cisco4%KEVCVE-2024-20399Cisco4%KEVCVE-2018-0175Cisco4%KEVCVE-2018-0167Cisco3%KEVCVE-2009-2055Cisco3%KEVCVE-2020-3569Cisco3%KEVCVE-2023-20109Cisco2%KEVCVE-2017-12232Cisco2%KEVCVE-2017-6663Cisco2%KEVCVE-2017-12238Cisco2%KEVCVE-2026-20262Cisco1%KEVCVE-2026-20245Cisco1%KEV
05

Coverage & confidence

— what this profile claims, and what it does not

Established (cited)

  • Cited in 95 known-exploited records — the list below; every one links to its public source.
  • Catalogued 92 CVE record(s) as the CNA assigner (from CVE.org).
  • Coverage gaps — stated, not hidden

  • This profile is an aggregation: it asserts only what the listed records already cite — no new external claim about the contributor is made.
  • The TYPE badge and the narrative-stage mapping are editorial (our call), labeled as such, not a sourced fact.