Known vulnerabilities in Cisco IOS XE - page 14

Vendor: Cisco Systems, Inc
Software: Cisco IOS XE
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xe:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 312
Public exploits: 7
Known exploited (KEV): 34
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XE Cisco IOS XE is affected by 312 known vulnerabilities: 4 critical, 53 high, 121 medium, 134 low Critical High Medium Low

Vulnerabilities (312)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU11373 - Resource Management Errors
CVE-2018-0189		 CWE-399 Medium
No
No
 - 30.03.2018 SB2018033005
#VU11368 - Error Handling
CVE-2018-0155		 CWE-388 Medium
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041803
#VU11367 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-0194		 CWE-78 Low
No
No
 - 30.03.2018 SB2018033005
#VU11366 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-0193		 CWE-78 Low
No
No
 - 30.03.2018 SB2018033005
#VU11365 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-0185		 CWE-78 Low
No
No
 - 30.03.2018 SB2018033005
#VU11364 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-0182		 CWE-78 Low
No
No
 - 30.03.2018 SB2018033005
#VU11363 - Heap-based Buffer Overflow
CVE-2018-0172		 CWE-122 Medium
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041802
SB2018041803
#VU11362 - Improper input validation
CVE-2018-0173		 CWE-20 Medium
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041802
SB2018041803
#VU11361 - Improper input validation
CVE-2018-0174		 CWE-20 Medium
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041802
SB2018041803
#VU11360 - Data Handling
CVE-2018-0154		 CWE-19 Medium
No
Exploited
 - 30.03.2018 SB2018033005
#VU11359 - Improper Authentication
CVE-2018-0163		 CWE-287 Low
No
No
 - 30.03.2018 SB2018033005
#VU11358 - Data Handling
CVE-2018-0157		 CWE-19 Medium
No
No
 - 30.03.2018 SB2018033005
#VU11357 - Resource exhaustion
CVE-2018-0165		 CWE-400 Medium
No
No
 - 30.03.2018 SB2018033005
#VU11356 - Missing release of memory after effective lifetime
CVE-2018-0158		 CWE-401 Medium
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041801
SB2018041802
#VU11354 - Improper input validation
CVE-2018-0159		 CWE-20 Medium
No
Exploited
 - 30.03.2018 SB2018033005
#VU11353 - Data Handling
CVE-2018-0177		 CWE-19 Medium
No
No
 - 30.03.2018 SB2018033005
#VU11352 - Memory corruption
CVE-2018-0175		 CWE-119 Low
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041801
SB2018041802
and 1 more
#VU11351 - Buffer overflow
CVE-2018-0167		 CWE-120 Low
No
Exploited
 - 30.03.2018 SB2018033005
SB2018041801
SB2018041802
and 1 more
#VU11350 - Use After Free
CVE-2018-0170		 CWE-416 Medium
No
No
 - 30.03.2018 SB2018033005
#VU9125 - Improper input validation
CVE-2017-12319		 CWE-20 Low
No
Exploited
 - 08.11.2017 SB2017110804


Showing elements 261 - 280 out of 312