Cisco Cisco IOS XE Software
248 vulnérabilités publiées citent ce produit. Les 200 plus récentes sont listées.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-20311 | 17.3.1 ; 17.3.1a ; 17.3.2a ; … | Cisco IOS XE Software Web UI Denial of Service Vulnerability | MEDIUM 6.3 | 0.3 % | ||
| CVE-2026-20301 | 17.2.1a ; 16.12.1y ; 16.12.3s ; … | Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability | HIGH 8.6 | 0.6 % | ||
| CVE-2026-20308 | 17.2.1a ; 16.12.1y ; 16.12.3s ; … | Cisco IOS XE Software Web-Based Management Interface Vulnerability | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-20273 | 17.2.1a ; 16.12.1y ; 16.12.3s ; … | Cisco IOS XE Software Security Hardening Release | HIGH 8.6 | 0.5 % | ||
| CVE-2026-20272 | 17.2.1a ; 16.12.1y ; 16.12.3s ; … | Cisco IOS XE Software Security Hardening Release | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-20271 | 17.2.1a ; 16.12.1y ; 16.12.3s ; … | Cisco IOS XE Software Security Hardening Release | HIGH 8.6 | 0.5 % | ||
| CVE-2026-20270 | 17.2.1a ; 16.12.1y ; 16.12.3s ; … | Cisco IOS XE Software Security Hardening Release | HIGH 8.6 | 0.5 % | ||
| CVE-2026-20269 | 17.2.1a ; 16.12.1y ; 16.12.3s ; … | Cisco IOS XE Software Security Hardening Release | HIGH 8.6 | 0.5 % | ||
| CVE-2026-20268 | 17.2.1a ; 16.12.1y ; 16.12.3s ; … | Cisco IOS XE Software Security Hardening Release | HIGH 8.6 | 0.5 % | ||
| CVE-2026-20267 | 17.2.1a ; 16.12.1y ; 16.12.3s ; … | Cisco IOS XE Software Security Hardening Release | CRITICAL 9.0 | 0.4 % | ||
| CVE-2026-20263 | 17.2.1a ; 16.12.1y ; 16.12.3s ; … | Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability | HIGH 8.6 | 0.6 % | ||
| CVE-2026-20124 | 17.2.1a ; 3.18.7SP ; 16.12.1y ; … | Cisco IOS XE Software SNMP Denial of Service Vulnerability | HIGH 7.7 | 0.5 % | ||
| CVE-2026-20112 | 16.6.1 ; 16.6.2 ; 16.6.3 ; … | A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an auth | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-20113 | 16.6.1 ; 16.6.2 ; 16.6.3 ; … | A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unau | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-20114 | 16.11.1 ; 16.11.1a ; 16.11.1b ; … | A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to e | MEDIUM 5.4 | 0.4 % | ||
| CVE-2026-20115 | 17.14.1 ; 17.14.1a ; 17.15.1 ; … | A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device informa | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-20083 | 3.5.0E ; 3.5.1E ; 3.5.2E ; … | A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-20110 | 16.6.1 ; 16.6.2 ; 16.6.3 ; … | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) conditio | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-20104 | 16.12.8 ; 16.12.6 ; 16.12.6a ; … | A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series S | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-20004 | 16.9.1 ; 16.9.2 ; 16.9.1a ; … | A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memor | HIGH 7.4 | 0.2 % | ||
| CVE-2026-20125 | 3.5.0E ; 3.5.1E ; 3.5.2E ; … | A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote a | HIGH 7.7 | 0.3 % | ||
| CVE-2026-20012 | 3.5.0E ; 3.5.1E ; 3.5.2E ; … | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall A | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20086 | 17.14.1 ; 17.15.1 ; 17.15.2 ; … | A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20084 | 16.6.1 ; 16.6.2 ; 16.6.3 ; … | A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets | HIGH 8.6 | 0.4 % | ||
| CVE-2025-20363 | 3.2.0SG ; 3.2.1SG ; 3.2.2SG ; … | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defens | CRITICAL 9.0 | 6.9 % | ||
| CVE-2025-20314 | 17.3.1 ; 17.3.2 ; 17.3.3 ; … | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacke | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20316 | 17.7.1 ; 17.10.1 ; 17.10.1b ; … | A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches cou | MEDIUM 5.3 | 0.3 % | ||
| CVE-2025-20293 | 16.10.1 ; 16.10.1s ; 16.10.1e ; … | A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) coul | MEDIUM 5.3 | 0.2 % | ||
| CVE-2025-20338 | 3.5.0E ; 3.5.1E ; 3.5.2E ; … | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute a | MEDIUM 6.7 | 0.3 % | ||
| CVE-2025-20240 | 16.6.1 ; 16.6.2 ; 16.6.3 ; … | A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a refl | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-20149 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-20313 | 17.3.1 ; 17.3.2 ; 17.3.3 ; … | Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthentic | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20311 | 16.6.1 ; 16.6.2 ; 16.6.3 ; … | A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthe | HIGH 7.4 | 0.2 % | ||
| CVE-2025-20312 | 17.2.1 ; 17.2.1r ; 17.2.1a ; … | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote att | HIGH 7.7 | 0.4 % | ||
| CVE-2025-20352 | 3.5.0E ; 3.5.1E ; 3.5.2E ; … | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the f | HIGH 7.7 | 42 % | KEV | |
| CVE-2025-20160 | 3.16.8S ; 3.16.9S ; 3.16.10S ; … | A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated | HIGH 8.1 | 0.4 % | ||
| CVE-2025-20315 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote | HIGH 8.6 | 0.4 % | ||
| CVE-2025-20334 | 17.9.5 ; 17.9.5a ; 17.9.5b ; … | A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with r | HIGH 8.8 | 0.5 % | ||
| CVE-2025-20239 | 3.14.0S ; 3.14.1S ; 3.14.2S ; … | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Secu | HIGH 8.6 | 0.6 % | ||
| CVE-2025-20225 | 3.3.0SG ; 3.3.2SG ; 3.3.1SG ; … | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Secu | MEDIUM 5.8 | 0.7 % | ||
| CVE-2025-20195 | 16.1.1 ; 16.1.2 ; 16.1.3 ; … | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a | MEDIUM 4.3 | 0.2 % | ||
| CVE-2025-20194 | 17.3.1 ; 17.3.2 ; 17.3.3 ; … | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker | MEDIUM 5.4 | 0.3 % | ||
| CVE-2025-20193 | 17.3.1 ; 17.3.2 ; 17.3.3 ; … | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-20201 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileg | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20200 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileg | HIGH 8.2 | 0.2 % | ||
| CVE-2025-20199 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileg | HIGH 8.2 | 0.2 % | ||
| CVE-2025-20198 | 3.13.0S ; 3.13.1S ; 3.13.2S ; … | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileg | HIGH 8.2 | 0.2 % | ||
| CVE-2025-20197 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileg | HIGH 8.2 | 0.2 % | ||
| CVE-2025-20221 | 16.12.13 ; 17.1.1 ; 17.1.1s ; … | A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass L | CRITICAL 9.1 | 0.6 % | ||
| CVE-2025-20162 | 16.11.1 ; 16.11.1a ; 16.11.2 ; … | A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a fu | HIGH 8.6 | 0.5 % | ||
| CVE-2025-20196 | 16.1.1 ; 16.1.2 ; 16.1.3 ; … | A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentica | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-20186 | 16.12.8 ; 16.12.4 ; 16.12.4a ; … | A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authent | HIGH 8.8 | 0.9 % | ||
| CVE-2025-20155 | 17.9.4 ; 17.9.5 ; 17.9.4a ; … | A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to a | MEDIUM 6.0 | 0.2 % | ||
| CVE-2025-20140 | 16.4.1 ; 16.4.2 ; 16.4.3 ; … | A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an un | HIGH 7.4 | 0.2 % | ||
| CVE-2025-20192 | 3.13.0S ; 3.13.1S ; 3.13.2S ; … | A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote | HIGH 7.7 | 0.5 % | ||
| CVE-2025-20189 | 3.16.0S ; 3.16.1S ; 3.16.1aS ; … | A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with R | HIGH 7.4 | 0.2 % | ||
| CVE-2025-20202 | 16.10.1 ; 16.10.1a ; 16.10.1b ; … | A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service | HIGH 7.4 | 0.2 % | ||
| CVE-2025-20190 | 17.6.8 ; 17.9.6 ; 17.9.6a ; … | A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authenticated, remote atta | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-20188 | 17.11.1 ; 17.12.1 ; 17.12.2 ; … | A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features | CRITICAL 10.0 | 27 % | ||
| CVE-2025-20214 | 17.11.1 ; 17.11.1a ; 17.12.1 ; … | A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authenticated, remote atta | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-20169 | 3.2.0SG ; 3.2.1SG ; 3.2.2SG ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20175 | 3.2.0SG ; 3.2.1SG ; 3.2.2SG ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20174 | 3.11.1S ; 3.11.2S ; 3.11.0S ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20170 | 3.2.0SG ; 3.2.1SG ; 3.2.2SG ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20171 | 3.2.0SG ; 3.2.1SG ; 3.2.2SG ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20176 | 3.3.0SE ; 3.3.1SE ; 3.3.2SE ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20172 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, | HIGH 7.7 | 0.8 % | ||
| CVE-2025-20173 | 3.2.0SG ; 3.2.1SG ; 3.2.2SG ; … | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause | HIGH 7.7 | 0.8 % | ||
| CVE-2024-20434 | 16.6.1 ; 16.6.2 ; 16.6.3 ; … | A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on t | MEDIUM 4.3 | 0.3 % | ||
| CVE-2024-20414 | 3.2.0SG ; 3.2.1SG ; 3.2.2SG ; … | A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to con | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-20510 | 16.3.1 ; 16.3.2 ; 16.3.3 ; … | A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthentic | CRITICAL 9.3 | 0.3 % | ||
| CVE-2024-20467 | 17.12.1 ; 17.12.1a ; 17.11.99SW | A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, rem | HIGH 8.6 | 1.0 % | ||
| CVE-2024-20464 | 17.13.1 ; 17.13.1a | A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker | HIGH 8.6 | 0.6 % | ||
| CVE-2024-20480 | 16.1.1 ; 16.1.2 ; 16.1.3 ; … | A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow a | HIGH 8.6 | 0.6 % | ||
| CVE-2024-20437 | 17.3.2 ; 17.3.3 ; 17.3.2a ; … | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a | HIGH 8.8 | 0.3 % | ||
| CVE-2024-20436 | 3.9.1S ; 3.9.2S ; 3.9.0aS ; … | A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthentic | HIGH 8.6 | 0.9 % | ||
| CVE-2024-20433 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthent | HIGH 8.6 | 0.6 % | ||
| CVE-2024-20455 | 17.1.1 ; 17.1.1a ; 17.1.1s ; … | A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software | HIGH 8.6 | 0.7 % | ||
| CVE-2024-20313 | 17.5.1 ; 17.5.1a ; 17.6.1 ; … | A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a | HIGH 7.4 | 0.3 % | ||
| CVE-2024-20310 | N/A | A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an un | MEDIUM 6.1 | 0.5 % | ||
| CVE-2024-20307 | 3.4.8SG ; 3.10.8S ; 3.10.8aS ; … | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attac | HIGH 7.5 | 0.7 % | ||
| CVE-2024-20308 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attac | HIGH 8.6 | 0.8 % | ||
| CVE-2024-20265 | N/A | A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisc | MEDIUM 5.9 | 0.2 % | ||
| CVE-2024-20309 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to caus | MEDIUM 5.6 | 0.1 % | ||
| CVE-2024-20303 | 17.2.1 ; 17.2.1r ; 17.2.1a ; … | A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unau | HIGH 7.4 | 0.3 % | ||
| CVE-2024-20278 | 17.6.1 ; 17.6.2 ; 17.6.1w ; … | A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-20306 | 17.10.1 ; 17.10.1a ; 17.10.1b ; … | A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker | MEDIUM 6.7 | 0.2 % | ||
| CVE-2024-20314 | 16.1.1 ; 16.1.2 ; 16.1.3 ; … | A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthentic | HIGH 8.6 | 0.8 % | ||
| CVE-2024-20312 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could all | HIGH 7.4 | 0.3 % | ||
| CVE-2024-20324 | 16.10.1 ; 16.10.1s ; 16.10.1e ; … | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuratio | MEDIUM 5.5 | 0.1 % | ||
| CVE-2024-20259 | 17.1.1 ; 17.1.1a ; 17.1.1s ; … | A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected d | HIGH 8.6 | 0.8 % | ||
| CVE-2024-20311 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthen | HIGH 8.6 | 0.8 % | ||
| CVE-2024-20316 | 16.3.1 ; 16.3.2 ; 16.3.3 ; … | A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to acces | MEDIUM 5.8 | 0.5 % | ||
| CVE-2023-20273 | 16.1.1 ; 16.1.2 ; 16.1.3 ; … | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the pri | HIGH 7.2 | 93 % | KEV | |
| CVE-2023-20198 | 16.1.1 ; 16.1.2 ; 16.1.3 ; … | Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2023-20235 | 17.3.1 ; 17.3.2 ; 17.3.3 ; … | A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS | HIGH 8.8 | 0.9 % | ||
| CVE-2023-20202 | 17.10.1 ; 17.10.1a ; 17.10.1b ; … | A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthent | MEDIUM 6.5 | 0.3 % | ||
| CVE-2023-20109 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an | MEDIUM 6.6 | 2.5 % | KEV | |
| CVE-2023-20186 | 3.7.0S ; 3.7.1S ; 3.7.2S ; … | A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could all | CRITICAL 9.1 | 0.8 % | ||
| CVE-2023-20227 | 16.8.1 ; 16.8.1a ; 16.8.1b ; … | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to | HIGH 8.6 | 0.9 % | ||
| CVE-2023-20226 | 17.7.1 ; 17.7.1a ; 17.7.2 ; … | A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unaut | HIGH 8.6 | 0.9 % | ||
| CVE-2023-20033 | 16.3.1 ; 16.3.2 ; 16.3.3 ; … | A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote at | HIGH 8.6 | 0.9 % | ||
| CVE-2023-20187 | 3.7.1S ; 3.7.2S ; 3.7.3S ; … | A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Serv | HIGH 8.6 | 0.9 % | ||
| CVE-2023-20231 | 16.12.8 ; 16.12.4 ; 16.12.4a ; … | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against | HIGH 8.8 | 1.0 % | ||
| CVE-2023-20100 | n/a | Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability | MEDIUM 6.8 | 0.8 % | ||
| CVE-2023-20072 | n/a | Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability | HIGH 8.6 | 1.0 % | ||
| CVE-2023-20067 | n/a | Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability | HIGH 7.4 | 0.3 % | ||
| CVE-2023-20066 | n/a | Cisco IOS XE Software Web UI Path Traversal Vulnerability | MEDIUM 6.5 | 1.7 % | ||
| CVE-2023-20065 | 16.4.1 ; 16.4.2 ; 16.4.3 ; … | A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elev | HIGH 7.8 | 0.4 % | ||
| CVE-2023-20035 | n/a | Cisco IOS XE SD-WAN Software Command Injection Vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2023-20029 | n/a | Cisco IOS XE Software Privilege Escalation Vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2023-20027 | n/a | Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability | HIGH 8.6 | 1.0 % | ||
| CVE-2022-20864 | n/a | Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability | MEDIUM 4.6 | 0.3 % | ||
| CVE-2022-20837 | n/a | Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability | HIGH 8.6 | 1.0 % | ||
| CVE-2022-20944 | n/a | Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability | MEDIUM 6.8 | 0.2 % | ||
| CVE-2022-20915 | n/a | Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability | HIGH 7.4 | 0.3 % | ||
| CVE-2022-20870 | n/a | Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability | HIGH 8.6 | 1.0 % | ||
| CVE-2022-20856 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability | HIGH 8.6 | 1.3 % | ||
| CVE-2022-20855 | n/a | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability | HIGH 7.9 | 0.4 % | ||
| CVE-2022-20851 | n/a | Cisco IOS XE Software Web UI Command Injection Vulnerability | HIGH 7.2 | 1.1 % | ||
| CVE-2022-20848 | n/a | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability | HIGH 8.6 | 1.0 % | ||
| CVE-2022-20847 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability | HIGH 8.6 | 1.3 % | ||
| CVE-2022-20810 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability | MEDIUM 6.5 | 0.8 % | ||
| CVE-2022-20676 | n/a | Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability | MEDIUM 6.7 | 0.3 % | ||
| CVE-2022-20678 | n/a | Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability | HIGH 8.6 | 1.0 % | ||
| CVE-2022-20679 | n/a | Cisco IOS XE Software IPSec Denial of Service Vulnerability | HIGH 7.7 | 1.3 % | ||
| CVE-2022-20681 | n/a | Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Catalyst 9000 Family Wireless Controllers Privilege Escalation Vulnerab… | HIGH 7.8 | 0.2 % | ||
| CVE-2022-20682 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability | HIGH 8.6 | 1.3 % | ||
| CVE-2022-20683 | n/a | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability | HIGH 8.6 | 1.5 % | ||
| CVE-2022-20684 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability | HIGH 7.4 | 0.5 % | ||
| CVE-2022-20692 | n/a | Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability | HIGH 7.7 | 1.1 % | ||
| CVE-2022-20693 | n/a | Cisco IOS XE Software Web UI API Injection Vulnerability | HIGH 7.2 | 1.6 % | ||
| CVE-2022-20694 | n/a | Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability | MEDIUM 6.8 | 1.2 % | ||
| CVE-2021-1621 | n/a | Cisco IOS XE Software Interface Queue Wedge Denial of Service Vulnerability | HIGH 7.4 | 0.4 % | ||
| CVE-2021-1619 | n/a | Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability | CRITICAL 9.8 | 1.8 % | ||
| CVE-2021-1616 | n/a | Cisco IOS XE Software H.323 Application Level Gateway Bypass Vulnerability | MEDIUM 4.7 | 1.2 % | ||
| CVE-2021-1615 | n/a | Cisco Embedded Wireless Controller Software for Catalyst Access Points Denial of Service Vulnerability | HIGH 8.6 | 1.3 % | ||
| CVE-2021-1611 | n/a | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers EoGRE Denial of Service Vulnerability | HIGH 8.6 | 1.3 % | ||
| CVE-2021-1565 | n/a | Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities | HIGH 8.6 | 1.3 % | ||
| CVE-2021-34770 | n/a | Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability | CRITICAL 10.0 | 3.0 % | ||
| CVE-2021-34769 | n/a | Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities | HIGH 8.6 | 1.4 % | ||
| CVE-2021-34768 | n/a | Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities | HIGH 8.6 | 1.4 % | ||
| CVE-2021-34767 | n/a | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability | HIGH 7.4 | 0.8 % | ||
| CVE-2021-34723 | n/a | Cisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2021-34697 | n/a | Cisco IOS XE Software Protection Against Distributed Denial of Service Attacks Feature Vulnerability | HIGH 8.6 | 1.3 % | ||
| CVE-2021-34696 | n/a | Cisco ASR 900 and ASR 920 Series Aggregation Services Routers Access Control List Bypass Vulnerability | MEDIUM 5.8 | 1.0 % | ||
| CVE-2021-1625 | n/a | Cisco IOS XE Software Zone-Based Policy Firewall ICMP and UDP Inspection Vulnerability | MEDIUM 5.8 | 0.9 % | ||
| CVE-2021-1624 | n/a | Cisco IOS XE Software Rate Limiting Network Address Translation Denial of Service Vulnerability | HIGH 8.6 | 1.3 % | ||
| CVE-2021-1623 | n/a | Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Simple Network Management Protocol Denial of Service Vulnerability | HIGH 7.7 | 1.1 % | ||
| CVE-2021-1622 | n/a | Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability | HIGH 8.6 | 1.0 % | ||
| CVE-2021-1381 | n/a | Cisco IOS XE Software Active Debug Code Vulnerability | MEDIUM 6.1 | 0.3 % | ||
| CVE-2021-1220 | n/a | Cisco IOS XE Software Web UI Denial of Service Vulnerabilities | MEDIUM 4.3 | 1.0 % | ||
| CVE-2021-1281 | n/a | Cisco IOS XE SD-WAN Software Privilege Escalation Vulnerability | MEDIUM 6.7 | 0.3 % | ||
| CVE-2021-1352 | n/a | Cisco IOS XE Software DECnet Phase IV/OSI Denial of Service Vulnerability | HIGH 7.4 | 0.4 % | ||
| CVE-2021-1356 | n/a | Cisco IOS XE Software Web UI Denial of Service Vulnerabilities | MEDIUM 4.3 | 1.0 % | ||
| CVE-2021-1371 | n/a | Cisco IOS XE SD-WAN Software Console Privilege Escalation Vulnerability | MEDIUM 6.6 | 0.3 % | ||
| CVE-2021-1373 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability | HIGH 8.6 | 1.5 % | ||
| CVE-2021-1374 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.7 % | ||
| CVE-2021-1375 | n/a | Cisco IOS XE Software Fast Reload Vulnerabilities | MEDIUM 6.7 | 0.2 % | ||
| CVE-2021-1376 | n/a | Cisco IOS XE Software Fast Reload Vulnerabilities | MEDIUM 6.7 | 0.2 % | ||
| CVE-2021-1382 | n/a | Cisco IOS XE SD-WAN Software Command Injection Vulnerability | MEDIUM 6.7 | 0.7 % | ||
| CVE-2021-1383 | n/a | Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities | MEDIUM 6.7 | 0.6 % | ||
| CVE-2021-1384 | n/a | Cisco IOx for IOS XE Software Command Injection Vulnerability | HIGH 7.2 | 35 % | ||
| CVE-2021-1390 | n/a | Cisco IOS XE Software Local Privilege Escalation Vulnerability | MEDIUM 6.7 | 0.3 % | ||
| CVE-2021-1394 | n/a | Cisco IOS XE Software for Network Convergence System 520 Routers Denial of Service Vulnerability | MEDIUM 5.3 | 1.3 % | ||
| CVE-2021-1398 | n/a | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | MEDIUM 6.8 | 0.4 % | ||
| CVE-2021-1403 | n/a | Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability | HIGH 7.4 | 0.6 % | ||
| CVE-2021-1454 | n/a | Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities | MEDIUM 6.7 | 0.3 % | ||
| CVE-2021-1453 | n/a | Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution Vulnerability | MEDIUM 6.8 | 0.2 % | ||
| CVE-2021-1451 | n/a | Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution Vulnerability | CRITICAL 9.8 | 3.3 % | ||
| CVE-2021-1446 | n/a | Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability | HIGH 8.6 | 1.5 % | ||
| CVE-2021-1443 | n/a | Cisco IOS XE Software Web UI OS Command Injection Vulnerability | HIGH 7.2 | 2.3 % | ||
| CVE-2021-1441 | n/a | Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability | MEDIUM 6.7 | 0.3 % | ||
| CVE-2021-1442 | n/a | Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2021-1436 | n/a | Cisco IOS XE SD-WAN Software Path Traversal Vulnerability | MEDIUM 4.4 | 0.3 % | ||
| CVE-2021-1435 | n/a | Cisco IOS XE Software Web UI Command Injection Vulnerability | HIGH 7.2 | 8.5 % | ||
| CVE-2021-1434 | n/a | Cisco IOS XE SD-WAN Software Arbitrary File Corruption Vulnerability | MEDIUM 6.0 | 0.2 % | ||
| CVE-2021-1433 | n/a | Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability | HIGH 8.1 | 2.3 % | ||
| CVE-2021-1432 | n/a | Cisco IOS XE SD-WAN Software Arbitrary Command Execution Vulnerability | HIGH 7.3 | 0.4 % | ||
| CVE-2021-1431 | n/a | Cisco IOS XE SD-WAN Software vDaemon Denial of Service Vulnerability | HIGH 7.5 | 1.7 % | ||
| CVE-2020-3359 | n/a | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability | HIGH 8.6 | 1.5 % | ||
| CVE-2020-3390 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability | HIGH 7.4 | 0.6 % | ||
| CVE-2020-3393 | n/a | Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2020-3396 | n/a | Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability | HIGH 7.2 | 0.3 % | ||
| CVE-2020-3399 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability | HIGH 8.6 | 1.4 % | ||
| CVE-2020-3400 | n/a | Cisco IOS XE Software Web UI Authorization Bypass Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2020-3403 | n/a | Cisco IOS XE Software Command Injection Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2020-3404 | n/a | Cisco IOS XE Software Consent Token Bypass Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2020-3407 | n/a | Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability | HIGH 8.6 | 1.5 % | ||
| CVE-2020-3416 | n/a | Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities | MEDIUM 6.7 | 0.3 % | ||
| CVE-2020-3417 | n/a | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | MEDIUM 6.8 | 0.4 % | ||
| CVE-2020-3418 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Improper Access Control Vulnerability | MEDIUM 4.7 | 0.4 % | ||
| CVE-2020-3421 | n/a | Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities | HIGH 8.6 | 1.9 % | ||
| CVE-2020-3422 | n/a | Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability | HIGH 8.6 | 1.3 % | ||
| CVE-2020-3428 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WLAN Local Profiling Denial of Service Vulnerability | HIGH 7.4 | 0.5 % | ||
| CVE-2020-3429 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability | HIGH 7.4 | 0.7 % | ||
| CVE-2020-3476 | n/a | Cisco IOS XE Software Arbitrary File Overwrite Vulnerability | MEDIUM 6.0 | 0.3 % | ||
| CVE-2020-3480 | n/a | Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities | HIGH 8.6 | 1.4 % | ||
| CVE-2020-3486 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities | HIGH 7.4 | 0.6 % | ||
| CVE-2020-3487 | n/a | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities | HIGH 7.4 | 0.5 % |