Cisco IOS XE
35 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0194 | Cisco IOS XE | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary command | HIGH 7.8 | 0.6 % | ||
| CVE-2018-0196 | Cisco IOS XE | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to write arb | MEDIUM 4.9 | 1.0 % | ||
| CVE-2018-0195 | Cisco IOS XE | A vulnerability in the Cisco IOS XE Software REST API could allow an authenticated, remote attacker to bypass API authorization checks and u | HIGH 8.8 | 1.3 % | ||
| CVE-2018-0193 | Cisco IOS XE | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary command | HIGH 7.8 | 0.6 % | ||
| CVE-2018-0190 | Cisco IOS XE | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker t | MEDIUM 6.1 | 0.9 % | ||
| CVE-2018-0188 | Cisco IOS XE | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker t | MEDIUM 6.1 | 0.9 % | ||
| CVE-2018-0186 | Cisco IOS XE | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker t | MEDIUM 6.1 | 0.9 % | ||
| CVE-2018-0185 | Cisco IOS XE | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary command | HIGH 7.8 | 0.6 % | ||
| CVE-2018-0184 | Cisco IOS XE | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Lin | MEDIUM 6.7 | 0.4 % | ||
| CVE-2018-0183 | Cisco IOS XE | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Lin | MEDIUM 6.7 | 0.4 % | ||
| CVE-2018-0182 | Cisco IOS XE | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary command | HIGH 7.8 | 0.6 % | ||
| CVE-2018-0177 | Cisco IOS XE | A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 S | HIGH 7.5 | 3.8 % | ||
| CVE-2018-0176 | Cisco IOS XE | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the under | HIGH 7.8 | 0.5 % | ||
| CVE-2018-0170 | Cisco IOS XE | A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause | HIGH 7.5 | 2.7 % | ||
| CVE-2018-0169 | Cisco IOS XE | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the under | HIGH 7.8 | 0.5 % | ||
| CVE-2018-0165 | Cisco IOS XE | A vulnerability in the Internet Group Management Protocol (IGMP) packet-processing functionality of Cisco IOS XE Software could allow an una | HIGH 7.4 | 0.7 % | ||
| CVE-2018-0164 | Cisco IOS XE | A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause | HIGH 8.6 | 1.8 % | ||
| CVE-2018-0160 | Cisco IOS XE | A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacke | MEDIUM 6.3 | 1.6 % | ||
| CVE-2018-0157 | Cisco IOS XE | A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device t | HIGH 8.6 | 2.7 % | ||
| CVE-2018-0150 | Cisco IOS XE | A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running an affected release o | CRITICAL 9.8 | 4.8 % | ||
| CVE-2017-12319 | Cisco IOS XE | A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow a | MEDIUM 5.9 | 5.2 % | KEV | |
| CVE-2017-12289 | Cisco IOS XE | A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an authenticated, local att | MEDIUM 4.4 | 0.4 % | ||
| CVE-2017-12272 | Cisco IOS XE | A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site s | MEDIUM 6.1 | 1.2 % | ||
| CVE-2017-12239 | Cisco IOS XE | A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged | MEDIUM 6.8 | 0.4 % | ||
| CVE-2017-12236 | Cisco IOS XE | A vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS XE 3.2 through 16.5 could allow an unauthent | CRITICAL 9.8 | 3.1 % | ||
| CVE-2017-12230 | Cisco IOS XE | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow an authenticated, remote attacker to elevate their | HIGH 8.8 | 3.2 % | ||
| CVE-2017-12229 | Cisco IOS XE | A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, re | CRITICAL 9.8 | 5.2 % | ||
| CVE-2017-12226 | Cisco IOS XE | A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 45 | HIGH 8.8 | 3.3 % | ||
| CVE-2017-12222 | Cisco IOS XE | A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of t | MEDIUM 6.5 | 0.7 % | ||
| CVE-2017-6796 | Cisco IOS XE | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an a | MEDIUM 6.7 | 0.4 % | ||
| CVE-2017-6795 | Cisco IOS XE | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an a | MEDIUM 4.4 | 0.4 % | ||
| CVE-2017-6664 | Cisco IOS XE | A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to acces | HIGH 7.5 | 0.9 % | ||
| CVE-2017-6606 | Cisco IOS XE | A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted sy | MEDIUM 6.4 | 0.5 % | ||
| CVE-2017-3858 | Cisco IOS XE | A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands tha | HIGH 8.8 | 3.1 % | ||
| CVE-2017-3856 | Cisco IOS XE | A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affec | HIGH 7.5 | 2.5 % |