Cisco Systems

Log in
Home / Cisco Security
 Vendor Vulnerability Reporting and
Disclosure Policy
 
Purpose
This policy sets forth the reporting and disclosure process that Cisco Systems, Inc. and its
subsidiaries (collectively, “Cisco”) follow when we discover security vulnerabilities in non-
Cisco products and services.
Policy
This policy must clearly state the timeline, actions, and responsibilities equally available to all
non-Cisco vendors.
Vendor Vulnerability Reporting and Disclosure
If a vulnerability...