Known vulnerabilities in Cisco IOS XE - page 16

Vendor: Cisco Systems, Inc
Software: Cisco IOS XE
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xe:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 312
Public exploits: 7
Known exploited (KEV): 34
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XE Cisco IOS XE is affected by 312 known vulnerabilities: 4 critical, 53 high, 121 medium, 134 low Critical High Medium Low

Vulnerabilities (312)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU6181 - Improper input validation
CVE-2016-1409		 CWE-20 High
No
Exploited
 - 24.03.2017 SB20016052601
#VU6165 - Improper input validation
CVE-2017-3864		 CWE-20 Medium
No
No
 - 23.03.2017 SB2017032204
#VU6163 - Resource Management Errors
CVE-2017-3856		 CWE-399 Medium
No
No
 - 23.03.2017 SB2017032303
#VU6159 - Improper input validation
CVE-2017-3850		 CWE-20 Medium
No
No
 - 22.03.2017 SB2017032202
#VU6158 - Improper input validation
CVE-2017-3849		 CWE-20 Medium
No
No
 - 22.03.2017 SB2017032201
#VU6125 - Improper input validation
CVE-2017-3881		 CWE-20 Critical
Available
Exploited
 - 17.03.2017 SB2017031702
#VU672 - Missing release of memory after effective lifetime
CVE-2016-6385		 CWE-401 Medium
No
No
 - 29.09.2016 SB2016092906
#VU647 - Improper input validation
CVE-2016-6412		 CWE-20 Low
No
No
 - 23.09.2016 SB2016092103
#VU630 - Improper input validation
CVE-2016-6410		 CWE-20 Low
No
No
 - 22.09.2016 SB2016092103
#VU629 - Resource Management Errors
CVE-2016-6409		 CWE-399 Low
No
No
 - 22.09.2016 SB2016092103
#VU628 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2016-6414		 CWE-78 Low
No
No
 - 22.09.2016 SB2016092103
#VU532 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6415		 CWE-200 High
Available
Exploited
 - 19.09.2016 SB2016091601


Showing elements 301 - 320 out of 312