IX
Network Security
IOS XE
by Cisco · last CVE Aug 5, 2026
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch

Add IOS XE to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-20198
In wildKEV
10.0
100%
Oct 16
Cisco IOS XE Web UI Privilege Escalation Vulnerability
Affected: 16.12 before 16.12.10a; 17.3 before 17.3.8a; 17.6 before 17.6.6a; 17.9 before 17.9.4a
CVE-2018-0151
In wildKEV
9.8
14%
Mar 28
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
Affected: 16.5.1
CVE-2017-3881
In wildKEV
9.8
99%
Mar 17
Cisco IOS and IOS XE Remote Code Execution Vulnerability
Affected: 3.2sg through 3.9e
CVE-2018-0167
In wildKEV
8.8
3%
Mar 28
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Affected: 5.2.0.base; through 15.6.3m1; through 15.2\(6\)e0a; through 15.2\(4a\)ea5
CVE-2017-6738
In wildKEV
8.8
11%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 2.2.0 through 3.17.0
CVE-2017-6736
In wildKEV
8.8
70%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 2.2.0 through 3.17
CVE-2017-6737
In wildKEV
8.8
45%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 2.2.0 through 3.17.0
CVE-2017-6742
In wildKEV
8.8
21%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 2.2.0 through 3.17
CVE-2017-6743
In wildKEV
8.8
11%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 2.2.0 through 3.17
CVE-2017-6740
In wildKEV
8.8
11%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 2.2.0 through 3.17
CVE-2017-6739
In wildKEV
8.8
11%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 2.2.0 through 3.17.0
CVE-2018-0172
In wildKEV
8.6
8%
Mar 28
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Affected: All versions, or not specified
CVE-2018-0158
In wildKEV
8.6
7%
Mar 28
Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
Affected: 15.5(3)s1.1; 15.5(3)s1.2; 15.5(3)s1.4; 15.5(3)s1.5; 15.5(3)s1.7; 15.5(3)s1.8; +14 more
CVE-2018-0155
In wildKEV
8.6
8%
Mar 28
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
Affected: 3.6(2)e; 3.6(2)e
CVE-2018-0174
In wildKEV
8.6
8%
Mar 28
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
Affected: 12.2(33)sre7a; through 15.2\(4a\)ea5; through 15.2\(6\)e0a
CVE-2018-0173
In wildKEV
8.6
8%
Mar 28
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Affected: denali-16.3.4; through 15.2\(6\)e0a; through 15.2\(4a\)ea5
CVE-2018-0175
In wildKEV
8.0
3%
Mar 28
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Affected: 15.4(3)m4.1; through 15.2\(4a\)ea5; through 15.2\(6\)e0a; through 15.6.3m1
CVE-2025-20352
In wildKEV
7.7
42%
Sep 24
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
Affected: 3.5.0e; 3.5.0sq; 3.5.1e; 3.5.1sq; 3.5.2e; 3.5.2sq; +34 more
CVE-2018-0159
In wildKEV
7.5
7%
Mar 28
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
Affected: 15.3(3)s
CVE-2018-0156
In wildKEV
7.5
9%
Mar 28
Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
Affected: 15.2(2)e4; 15.2(2a)ja
CVE-2017-12237
In wildKEV
7.5
7%
Sep 28
Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
Affected: 3.5.0e through 16.5
CVE-2017-6627
In wildKEV
7.5
6%
Sep 7
Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
Affected: 3.14.0s; 3.14.1s; 3.14.2s; 3.14.3s; 3.14.4s; 3.15.0s; +30 more
CVE-2016-6415
In wildKEV
7.5
88%
Sep 19
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
Affected: through 3.18s
CVE-2023-20273
In wildKEV
7.2
93%
Oct 24
Cisco IOS XE Web UI Command Injection Vulnerability
Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1a; +34 more
CVE-2023-20109
In wildKEV
6.6
2%
Sep 27
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
Affected: 3.3.0sg; 3.3.1sg; 3.3.2sg; 3.4.0sg; 3.4.1sg; 3.4.2sg; +34 more
CVE-2017-6663
In wildKEV
6.5
2%
Aug 7
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
Affected: 3.7.0e; 3.7.1e; 3.7.3e; 3.8.0e; 3.8.0ex; 3.8.1e; +34 more
CVE-2017-12319
In wildKEV
5.9
5%
Mar 27
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
Affected: Cisco IOS XE
Showing 27
The 500 most important CVEs for this product (exploited first, then by severity)