IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20198 In wildKEV | 10.0 | Oct 16 | Cisco IOS XE Web UI Privilege Escalation Vulnerability Affected: 16.12 before 16.12.10a; 17.3 before 17.3.8a; 17.6 before 17.6.6a; 17.9 before 17.9.4a |
| CVE-2018-0151 In wildKEV | 9.8 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability Affected: 16.5.1 |
| CVE-2017-3881 In wildKEV | 9.8 | Mar 17 | Cisco IOS and IOS XE Remote Code Execution Vulnerability Affected: 3.2sg through 3.9e |
| CVE-2018-0167 In wildKEV | 8.8 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Affected: 5.2.0.base; through 15.6.3m1; through 15.2\(6\)e0a; through 15.2\(4a\)ea5 |
| CVE-2017-6738 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17.0 |
| CVE-2017-6736 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17 |
| CVE-2017-6737 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17.0 |
| CVE-2017-6742 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17 |
| CVE-2017-6743 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17 |
| CVE-2017-6740 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17 |
| CVE-2017-6739 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 2.2.0 through 3.17.0 |
| CVE-2018-0172 In wildKEV | 8.6 | Mar 28 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2018-0158 In wildKEV | 8.6 | Mar 28 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability Affected: 15.5(3)s1.1; 15.5(3)s1.2; 15.5(3)s1.4; 15.5(3)s1.5; 15.5(3)s1.7; 15.5(3)s1.8; +14 more |
| CVE-2018-0155 In wildKEV | 8.6 | Mar 28 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability Affected: 3.6(2)e; 3.6(2)e |
| CVE-2018-0174 In wildKEV | 8.6 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability Affected: 12.2(33)sre7a; through 15.2\(4a\)ea5; through 15.2\(6\)e0a |
| CVE-2018-0173 In wildKEV | 8.6 | Mar 28 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Affected: denali-16.3.4; through 15.2\(6\)e0a; through 15.2\(4a\)ea5 |
| CVE-2018-0175 In wildKEV | 8.0 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Affected: 15.4(3)m4.1; through 15.2\(4a\)ea5; through 15.2\(6\)e0a; through 15.6.3m1 |
| CVE-2025-20352 In wildKEV | 7.7 | Sep 24 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Affected: 3.5.0e; 3.5.0sq; 3.5.1e; 3.5.1sq; 3.5.2e; 3.5.2sq; +34 more |
| CVE-2018-0159 In wildKEV | 7.5 | Mar 28 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability Affected: 15.3(3)s |
| CVE-2018-0156 In wildKEV | 7.5 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability Affected: 15.2(2)e4; 15.2(2a)ja |
| CVE-2017-12237 In wildKEV | 7.5 | Sep 28 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability Affected: 3.5.0e through 16.5 |
| CVE-2017-6627 In wildKEV | 7.5 | Sep 7 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability Affected: 3.14.0s; 3.14.1s; 3.14.2s; 3.14.3s; 3.14.4s; 3.15.0s; +30 more |
| CVE-2016-6415 In wildKEV | 7.5 | Sep 19 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability Affected: through 3.18s |
| CVE-2023-20273 In wildKEV | 7.2 | Oct 24 | Cisco IOS XE Web UI Command Injection Vulnerability Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1a; +34 more |
| CVE-2023-20109 In wildKEV | 6.6 | Sep 27 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Affected: 3.3.0sg; 3.3.1sg; 3.3.2sg; 3.4.0sg; 3.4.1sg; 3.4.2sg; +34 more |
| CVE-2017-6663 In wildKEV | 6.5 | Aug 7 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability Affected: 3.7.0e; 3.7.1e; 3.7.3e; 3.8.0e; 3.8.0ex; 3.8.1e; +34 more |
| CVE-2017-12319 In wildKEV | 5.9 | Mar 27 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability Affected: Cisco IOS XE |
| CVE-2025-20188 | 10.0 | May 7 | A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless… Affected: 17.11.1; 17.11.99sw; 17.12.1; 17.12.2; 17.12.3; 17.13.1; +1 more |
| CVE-2019-12643 | 10.0 | Aug 28 | A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed… Affected: 15.5(3)s3.16; 16.6.5 |
| CVE-2026-20272 | 9.8 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; 16.6.5; +34 more |
| CVE-2021-34770 | 9.8 | Sep 23 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers… Affected: 3.15.1xbs; 3.15.2xbs; 16.6.4s; 16.10.1; 16.10.1e; 16.10.1s; +22 more |
| CVE-2021-1451 | 9.8 | Mar 24 | A vulnerability in the Easy Virtual Switching System (VSS) feature of Cisco IOS XE Software for Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could… Affected: 3.6.0be; 3.6.0e; 3.6.1e; 3.6.2e; 3.6.3e; 3.6.4e; +34 more |
| CVE-2020-3227 | 9.8 | Jun 3 | A vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.11.6e; 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; +34 more |
| CVE-2018-0315 | 9.8 | Jun 7 | A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute… Affected: 16.7.1; 16.8.1 |
| CVE-2018-0150 | 9.8 | Mar 28 | A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running an affected release of Cisco IOS XE Software with the… Affected: 16.5.1 |
| CVE-2017-12236 | 9.8 | Sep 29 | A vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote attacker using an x… Affected: 3.2.0ja; 3.9.1e; 16.5.1c |
| CVE-2017-12229 | 9.8 | Sep 29 | A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, remote attacker to bypass authentication… Affected: 3.1.3as; 3.2.0ja; 3.2.1xo; 3.4.7asg; 3.6.5be; 3.8.0ex; +11 more |
| CVE-2016-6441 | 9.8 | Nov 3 | A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute… Affected: 3.17.0s; 3.17.1s; 3.17.2s; 3.17s; 3.18.0s; 3.18.1s; +1 more |
| CVE-2024-20510 | 9.3 | Sep 25 | A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2025-20221 | 9.1 | May 7 | A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters Affected: 16.12.13; 17.1.1; 17.1.1s; 17.1.1t; 17.1.3; 17.2.1; +34 more |
| CVE-2023-20186 | 9.1 | Sep 27 | A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sg; +34 more |
| CVE-2021-1619 | 9.1 | Sep 23 | A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass NETCONF or… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2026-20267 | 9.0 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; 16.6.5; +34 more |
| CVE-2025-20363 | 9.0 | Sep 25 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software,… Affected: 3.2.0sg through 17.17.1 |
| CVE-2025-20186 | 8.8 | May 7 | A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby… Affected: 16.12.4; 16.12.4a; 16.12.5; 16.12.6; 16.12.6a; 16.12.7; +34 more |
| CVE-2024-20437 | 8.8 | Sep 25 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-site request forgery (CSRF)… Affected: 17.3.2; 17.3.2a; 17.3.3; 17.3.4; 17.3.4a; 17.3.4b; +34 more |
| CVE-2023-20235 | 8.8 | Oct 4 | A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an… Affected: before 17.3.1 |
| CVE-2023-20231 | 8.8 | Sep 27 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device Affected: 16.12.4; 16.12.4a; 16.12.5; 16.12.5a; 16.12.5b; 16.12.6; +34 more |
| CVE-2023-20076 | 8.8 | Feb 12 | A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host… Affected: before 17.6.5; 17.9.0 before 17.9.2; 17.10.0 |
| CVE-2020-3425 | 8.8 | Sep 24 | Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)