IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20056 | 5.5 | Mar 23 | A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected… Affected: before 16.12.8; 17.1 before 17.3.6; 17.4 before 17.6.5; 17.7 before 17.9.2 |
| CVE-2019-12660 | 5.5 | Sep 25 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to write values to the underlying memory of an affected device Affected: 16.1.1 and later |
| CVE-2018-0123 | 5.5 | Feb 8 | A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use certain diagnostic shell commands that… Affected: All versions, or not specified |
| CVE-2025-20194 | 5.4 | May 7 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against… Affected: 17.3.1; 17.3.1a; 17.3.1w; 17.3.1x; 17.3.1z; 17.3.2; +34 more |
| CVE-2025-20196 | 5.3 | May 7 | A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2024-20316 | 5.3 | Mar 27 | A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2023-20246 | 5.3 | Nov 1 | Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on… Affected: 17.12 before 17.12.2 |
| CVE-2022-20724 | 5.3 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2021-34705 | 5.3 | Sep 23 | A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass… Affected: 3.7.0bs; 3.7.0s; 3.7.0xas; 3.7.0xbs; 3.7.1as; 3.7.1s; +34 more |
| CVE-2021-1495 | 5.3 | Apr 29 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: 16.12 before 16.12.5 |
| CVE-2021-1394 | 5.3 | Mar 24 | A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System (NCS) 520 Routers could allow an unauthenticated, remote attacker to… Affected: 16.10.1; 16.10.1a; 16.10.1b; 16.10.1c; 16.10.1d; 16.10.1e; +4 more |
| CVE-2021-1236 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured… Affected: before 17.4.1 |
| CVE-2021-1224 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated,… Affected: before 17.4.1 |
| CVE-2019-1759 | 5.3 | Mar 28 | A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.2.0ja; 16.2.1; 16.2.2; 16.3.1; 16.3.1a; 16.3.2; +34 more |
| CVE-2019-1742 | 5.3 | Mar 28 | A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access sensitive configuration information Affected: 3.2.0ja; 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; +17 more |
| CVE-2018-0189 | 5.3 | Mar 28 | A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of… Affected: before 15.5\(3\)s5; before 15.5\(3\)m5; before 15.4\(3\)s7; before 15.4\(2\)s1; before 15.4\(1\)s1; before 15.4\(1\)s0a; +4 more |
| CVE-2017-12211 | 5.3 | Sep 7 | A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU… Affected: 3.16.1 |
| CVE-2016-1459 | 5.3 | Jul 17 | Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload) via crafted attributes in a BGP… Affected: 3.13.2s; 3.13.3s; 3.13.4s; 3.13.5s; 3.14.0s; 3.14.1s; +13 more |
| CVE-2022-20722 | 4.9 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2022-20721 | 4.9 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2020-3223 | 4.9 | Jun 3 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to read arbitrary… Affected: 16.9.4; 16.9.4c; 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; +9 more |
| CVE-2018-0196 | 4.9 | Mar 28 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbitrary files to the operating system of… Affected: 16.1.2; 16.2.0; 16.3(1) |
| CVE-2022-20725 | 4.8 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2021-1374 | 4.8 | Mar 24 | A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; +34 more |
| CVE-2019-12668 | 4.8 | Sep 25 | A vulnerability in the web framework code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 16.1.1 before 16.3.8; 16.4.1 before 16.6.5; 16.7.1 before 16.8.2; 16.9.1 before 16.9.2; 3.6e; 3.7e; +4 more |
| CVE-2019-12667 | 4.8 | Sep 25 | A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a… Affected: 16.1.1 before 16.6.5; 16.7.1 before 16.9.2 |
| CVE-2021-27853 | 4.7 | Sep 27 | Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers Affected: 17.3.3 |
| CVE-2021-1616 | 4.7 | Sep 23 | A vulnerability in the H.323 application level gateway (ALG) used by the Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote… Affected: before 17.6.1 |
| CVE-2020-3418 | 4.7 | Sep 24 | A vulnerability in Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers could allow an unauthenticated, adjacent attacker to send ICMPv6 traffic prior… Affected: 17.1.1 |
| CVE-2020-3206 | 4.7 | Jun 3 | A vulnerability in the handling of IEEE 802.11w Protected Management Frames (PMFs) of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could… Affected: 16.10.1; 16.10.1e; 16.10.1s |
| CVE-2021-1436 | 4.4 | Mar 24 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path traversal attacks and obtain read access to sensitive files… Affected: 3.15.1xbs; 3.15.2xbs; 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; +31 more |
| CVE-2019-1762 | 4.4 | Mar 28 | A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local attacker to access sensitive system information on an affected… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; +22 more |
| CVE-2017-6795 | 4.4 | Sep 7 | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to… Affected: All versions, or not specified |
| CVE-2025-20214 | 4.3 | May 7 | A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access… Affected: 17.11.1; 17.11.1a; 17.11.99sw; 17.12.1; 17.12.1a; 17.12.1w; +8 more |
| CVE-2025-20195 | 4.3 | May 7 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2024-20434 | 4.3 | Sep 25 | A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the control plane of an affected device Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.5; +34 more |
| CVE-2021-1356 | 4.3 | Mar 24 | Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to cause the web UI software to become… Affected: 3.15.1xbs; 3.15.2xbs; 17.1.1; 17.1.1a; 17.1.1s; 17.1.1t; +7 more |
| CVE-2021-1220 | 4.3 | Mar 24 | Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to cause the web UI software to become… Affected: 3.15.1xbs; 3.15.2xbs; 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; +29 more |
| CVE-2020-3516 | 4.3 | Sep 24 | A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device Affected: before 16.9.6; 16.12.0 before 16.12.2; 17.1.0 before 17.1.1; 17.2.1 |
| CVE-2020-3222 | 4.3 | Jun 3 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass access control restrictions on an… Affected: 16.10.1; 16.10.1a; 16.10.1b; 16.10.1c; 16.10.1d; 16.10.1e; +16 more |
| CVE-2019-1761 | 4.3 | Mar 28 | A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially… Affected: 3.2.0ja; 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; +34 more |
| CVE-2018-0257 | 4.3 | Apr 19 | A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an… Affected: 3.18 through 3.18.4; 16.6 through 16.6.3; after 16.7 through 16.7.2; 15.6(2)sp; 16.4; 16.5 |
| CVE-2017-12213 | 4.3 | Sep 7 | A vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent… Affected: All versions, or not specified |
| CVE-2017-6770 | 4.2 | Aug 7 | Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability… Affected: 3.6.0e; 3.6.1e; 3.6.2e; 3.6.4e; 3.6.5ae; 3.6.5e; +34 more |
| CVE-2016-6450 | 2.5 | Nov 19 | A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying… Affected: 3.6.2ae; 3.6.3e; 3.6.4e; 3.8.1e; 16.1.1; 16.1.2; +4 more |
| CVE-2015-6429 | – | Dec 19 | The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a… Affected: 3.15s.0; 3.15s.1; 3.15s.2; 3.16s.0; 3.16s.1; 3.17s.0; +1 more |
| CVE-2015-6383 | – | Dec 3 | Cisco IOS XE 15.4(3)S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using… Affected: 15.4(3)s |
| CVE-2015-6280 | – | Sep 28 | The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before… Affected: 3.6e.0; 3.6e.0a; 3.6e.0b; 3.6e.1; 3.6e.2; 3.6e.2a; +20 more |
| CVE-2015-6279 | – | Sep 28 | The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E… Affected: 3.2se.0; 3.2se.1; 3.2se.2; 3.2se.3; 3.3se.0; 3.3se.1; +34 more |
| CVE-2015-6278 | – | Sep 28 | The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E… Affected: 3.2se.0; 3.2se.1; 3.2se.2; 3.2se.3; 3.3se.0; 3.3se.1; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)