Product by Cisco
Cisco IP Phone 8865 Firmware 9.3(4)SR3
24 known vulnerabilities in Cisco IP Phone 8865 Firmware 9.3(4)SR3 (Cisco), 1 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-3161 | Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability In CISA KEValso in 11 other products | 9.8 | |
| Critical | CVE-2023-20078 | Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities | 9.8 | |
| Critical | CVE-2023-20079 | Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities | 9.8 | |
| High | CVE-2022-20968 | Cisco Session Initiation Protocol (SIP) Software: Out-of-bounds Write | 8.1 | |
| High | CVE-2020-3111 | Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability | 8.8 | |
| Medium | CVE-2020-26139 | NetBSD: Denial of Service | 5.3 | |
| Medium | CVE-2020-26141 | Cisco IP Phone 8861 Firmware 11.0(4)SR2: security vulnerability | 6.5 | |
| Medium | CVE-2020-26140 | Siemens Scalance W788-2 Firmware: security vulnerability | 6.5 | |
| High | CVE-2019-1635 | Cisco IP Phone 7800 Series and 8800 Series: Resource Management Errors | 7.5 | |
| Low | CVE-2020-24588 | Ieee 802.11: security vulnerability | 3.5 | |
| Low | CVE-2020-24587 | Ieee 802.11: security vulnerability | 2.6 | |
| High | CVE-2019-1922 | Cisco IP Phone 7800 and 8800 Series Session Initiation Protocol Denial of Service Vulnerability | 5.3 | |
| High | CVE-2023-20018 | Cisco Session Initiation Protocol (SIP) Software: Authentication Bypass Using an Alternate Path or Channel | 8.6 | |
| High | CVE-2025-20350 | Cisco Session Initiation Protocol (SIP) Software: Stack-based Buffer Overflow | 7.5 | |
| Medium | CVE-2019-1684 | Cisco IP Phone 8800 Series Software: Resource Management Errors | 6.5 | |
| Medium | CVE-2019-16008 | Cisco IP Phone 6821 Firmware: Cross-site Scripting | 5.4 | |
| High | CVE-2025-20336 | Cisco Session Initiation Protocol (SIP) Software: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2025-20351 | Cisco Session Initiation Protocol (SIP) Software: Cross-site Scripting | 6.1 | |
| Medium | CVE-2021-1379 | Cisco IP Phones with Multiplatform Firmware: Classic Buffer Overflow | 6.5 | |
| High | CVE-2022-20774 | Cisco IP Phone 6825 Firmware: Insufficient Verification of Data Authenticity | 6.8 | |
| Medium | CVE-2025-20335 | Cisco Session Initiation Protocol (SIP) Software: Improper Access Control | 5.3 | |
| Medium | CVE-2021-33478 | Cisco IP Phone 8800 Firmware 10.3(1)sr4: Code Execution | 6.8 | |
| Medium | CVE-2021-34711 | Cisco IP Phone Software Arbitrary File Read Vulnerability | 5.5 | |
| Medium | CVE-2022-20660 | Cisco IP Phones Information Disclosure Vulnerability | 4.6 |