Known vulnerabilities in Cisco IOS XE - page 13

Vendor: Cisco Systems, Inc
Software: Cisco IOS XE
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xe:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 312
Public exploits: 7
Known exploited (KEV): 34
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XE Cisco IOS XE is affected by 312 known vulnerabilities: 4 critical, 53 high, 121 medium, 134 low Critical High Medium Low

Vulnerabilities (312)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU11760 - Permissions, Privileges, and Access Controls
CVE-2011-3271		 CWE-264 High
No
No
 - 11.04.2018 SB2018042403
#VU11348 - Command injection
CVE-2018-0176		 CWE-77 Low
No
No
 - 29.03.2018 SB2018033005
#VU11347 - Command injection
CVE-2018-0169		 CWE-77 Low
No
No
 - 29.03.2018 SB2018033005
#VU11346 - Command injection
CVE-2018-0184		 CWE-77 Low
No
No
 - 29.03.2018 SB2018033005
#VU11345 - Command injection
CVE-2018-0183		 CWE-77 Low
No
No
 - 29.03.2018 SB2018033005
#VU11341 - Improper Authorization
CVE-2018-0195		 CWE-285 Low
No
No
 - 29.03.2018 SB2018033005
#VU11340 - Improper input validation
CVE-2018-0164		 CWE-20 Medium
No
No
 - 29.03.2018 SB2018033005
#VU11339 - Resource Management Errors
CVE-2018-0180		 CWE-399 Medium
No
Exploited
 - 29.03.2018 SB2018033005
#VU11338 - Resource Management Errors
CVE-2018-0179		 CWE-399 Medium
No
Exploited
 - 29.03.2018 SB2018033005
#VU11337 - Improper input validation
CVE-2018-0156		 CWE-20 Medium
No
Exploited
 - 29.03.2018 SB2018033005
SB2018041802
SB2018041803
#VU11335 - Resource Management Errors
CVE-2018-0161		 CWE-399 Medium
No
Exploited
 - 29.03.2018 SB2018033005
#VU11334 - Double Free
CVE-2018-0160		 CWE-415 Medium
No
No
 - 29.03.2018 SB2018033005
#VU11332 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0188		 CWE-79 Low
No
No
 - 29.03.2018 SB2018033005
#VU11330 - Improper input validation
CVE-2018-0196		 CWE-20 Low
No
No
 - 29.03.2018 SB2018033005
#VU11329 - Permissions, Privileges, and Access Controls
CVE-2018-0152		 CWE-264 Low
No
No
 - 29.03.2018 SB2018033005
#VU11328 - Use of Hard-coded Credentials
CVE-2018-0150		 CWE-798 Low
No
No
 - 29.03.2018 SB2018033005
#VU11331 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0186		 CWE-79 Low
No
No
 - 28.03.2018 SB2018033005
#VU11333 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0190		 CWE-79 Low
No
No
 - 28.03.2018 SB2018033005
#VU11336 - Buffer overflow
CVE-2018-0171		 CWE-120 High
Available
Exploited
 - 28.03.2018 SB2018033005
SB2018041802
SB2018041803
#VU11342 - Buffer overflow
CVE-2018-0151		 CWE-120 High
No
Exploited
 - 28.03.2018 SB2018033005
SB2018041801


Showing elements 241 - 260 out of 312