IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20198 In wildKEV | 10.0 | Oct 16 | Cisco IOS XE Web UI Privilege Escalation Vulnerability Affected: 16.12 before 16.12.10a; 17.3 before 17.3.8a; 17.6 before 17.6.6a; 17.9 before 17.9.4a |
| CVE-2018-0151 In wildKEV | 9.8 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability Affected: 16.5.1 |
| CVE-2017-3881 In wildKEV | 9.8 | Mar 17 | Cisco IOS and IOS XE Remote Code Execution Vulnerability Affected: 3.2sg through 3.9e |
| CVE-2018-0167 In wildKEV | 8.8 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Affected: 5.2.0.base; through 15.6.3m1; through 15.2\(6\)e0a; through 15.2\(4a\)ea5 |
| CVE-2017-6738 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17.0 |
| CVE-2017-6736 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17 |
| CVE-2017-6737 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17.0 |
| CVE-2017-6742 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17 |
| CVE-2017-6743 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17 |
| CVE-2017-6740 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17 |
| CVE-2017-6739 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17.0 |
| CVE-2018-0172 In wildKEV | 8.6 | Mar 28 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2018-0158 In wildKEV | 8.6 | Mar 28 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability Affected: 15.5(3)s1.1; 15.5(3)s1.2; 15.5(3)s1.4; 15.5(3)s1.5; 15.5(3)s1.7; 15.5(3)s1.8; +14 more |
| CVE-2018-0155 In wildKEV | 8.6 | Mar 28 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability Affected: 3.6(2)e; 3.6(2)e |
| CVE-2018-0174 In wildKEV | 8.6 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability Affected: 12.2(33)sre7a; through 15.2\(4a\)ea5; through 15.2\(6\)e0a |
| CVE-2018-0173 In wildKEV | 8.6 | Mar 28 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Affected: denali-16.3.4; through 15.2\(6\)e0a; through 15.2\(4a\)ea5 |
| CVE-2018-0175 In wildKEV | 8.0 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Affected: 15.4(3)m4.1; through 15.2\(4a\)ea5; through 15.2\(6\)e0a; through 15.6.3m1 |
| CVE-2025-20352 In wildKEV | 7.7 | Sep 24 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Affected: 3.5.0e; 3.5.0sq; 3.5.1e; 3.5.1sq; 3.5.2e; 3.5.2sq; +34 more |
| CVE-2018-0159 In wildKEV | 7.5 | Mar 28 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability Affected: 15.3(3)s |
| CVE-2018-0156 In wildKEV | 7.5 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability Affected: 15.2(2)e4; 15.2(2a)ja |
| CVE-2017-12237 In wildKEV | 7.5 | Sep 28 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability Affected: 3.5.0e through 16.5 |
| CVE-2017-6627 In wildKEV | 7.5 | Sep 7 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability Affected: 3.14.0s; 3.14.1s; 3.14.2s; 3.14.3s; 3.14.4s; 3.15.0s; +30 more |
| CVE-2016-6415 In wildKEV | 7.5 | Sep 19 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability Affected: through 3.18s |
| CVE-2023-20273 In wildKEV | 7.2 | Oct 24 | Cisco IOS XE Web UI Command Injection Vulnerability Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1a; +34 more |
| CVE-2023-20109 In wildKEV | 6.6 | Sep 27 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Affected: 3.3.0sg; 3.3.1sg; 3.3.2sg; 3.4.0sg; 3.4.1sg; 3.4.2sg; +34 more |
| CVE-2017-6663 In wildKEV | 6.5 | Aug 7 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability Affected: 3.7.0e; 3.7.1e; 3.7.3e; 3.8.0e; 3.8.0ex; 3.8.1e; +34 more |
| CVE-2017-12319 In wildKEV | 5.9 | Mar 27 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability Affected: Cisco IOS XE |
Showing 27
The 500 most important CVEs for this product (exploited first, then by severity)
