Cisco has issued a security advisory, reporting critical vulnerabilities affecting Cisco Identity Services Engine (ISE), Cisco Enterprise Chat and Email (ECE), Cisco Prime Infrastructure, Cisco Slido, Cisco IoT Field Network Director Software, Cisco Crosswork Network Controller (CNC), Cisco Network Services Orchestrator (NSO), Cisco 350 Series Managed Switches (SG350), Cisco 350X Series Stackable Managed Switches (SG350X) and Cisco Unity Connection. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, security restriction bypass, remote code execution, cross-site scripting, sensitive information disclosure and elevation of privilege on the targeted system.

Cisco recommends that users follow the recommendations published in this Security Bulletin.

More information is available in the Cisco Security Bulletin - cisco.com.