Known vulnerabilities in Cisco IOS XE - page 2

Software: Cisco IOS XE
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xe:*:*:*:*:*:*:*:*
Total vulnerabilities: 312
Public exploits: 7
Known exploited (KEV): 34
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XE Cisco IOS XE is affected by 312 known vulnerabilities: 4 critical, 53 high, 121 medium, 134 low Critical High Medium Low

Vulnerabilities (312)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124591 - Improper Handling of Extra Parameters
CVE-2026-20083
CWE-235 Low
No
No
17.15.5 25.03.2026 SB20260325180
#VU124570 - Missing Reference to Active Allocated Resource
CVE-2026-20004
CWE-771 Medium
No
No
17.9.7, 17.12.1z5, 17.12.5 25.03.2026 SB20260325180
#VU124566 - Improper Handling of Missing Values
CVE-2026-20086
CWE-230 High
No
No
17.15.5, 17.18.2 25.03.2026 SB20260325180
#VU124563 - Buffer Underwrite ('Buffer Underflow')
CVE-2026-20104
CWE-124 Medium
No
No
17.15.5, 17.18.2 25.03.2026 SB20260325180
#VU121070 - Out-of-bounds read
CVE-2026-20027
CWE-125 Medium
No
No
26.1.1 07.01.2026 SB2026010776
SB2026010777
SB2026010778
#VU121069 - Use After Free
CVE-2026-20026
CWE-416 Medium
No
No
26.1.1 07.01.2026 SB2026010776
SB2026010777
SB2026010778
#VU116120 - Heap-based Buffer Overflow
CVE-2025-20363
CWE-122 Critical
No
No
16.12.14, 17.9.7a, 17.9.8, 17.12.6, 17.15.1z, 17.15.3a, 17.15.4, 17.18.1 25.09.2025 SB2025092573
SB2025092574
SB2025092575
#VU116117 - Improper Access Control
CVE-2025-20316
CWE-284 Medium
No
No
IOSXE-17.15.4, SDK-25.2.3000.2, SDK-25.4.1000.0, Cupertino-17.9.8, 17.9(7.2), 17.9.8, 17.12(5.2), 17.15(3.3), 17.15.4 25.09.2025 SB2025092544
#VU116112 - Data Handling
CVE-2025-20311
CWE-19 Medium
No
No
Dublin-17.12.5, Cupertino-17.9.7, 17.9.7, 17.9.7a, 17.9.7b, 17.12.4a, 17.12.4b, 17.12.5, 17.12.5c, 17.12.5a, 17.12.5b, 17.12.6, 17.12.6a, 17.15.3, 17.17.1 25.09.2025 SB2025092539
#VU116110 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-20314
CWE-22 Low
No
No
Cupertino-17.9.8, 17.9.8, 17.12.6, 17.12.6a, 17.15.1z, 17.15.4, 17.15.4a, 17.15.4b, 17.18.1, 17.18.1a 25.09.2025 SB2025092532
#VU116109 - Improper Handling of Undefined Values
CVE-2025-20313
CWE-232 Low
No
No
Cupertino-17.9.8, 17.9.8, 17.12.6, 17.12.6a, 17.15.1z, 17.15.4, 17.15.4a, 17.15.4b, 17.18.1, 17.18.1a 25.09.2025 SB2025092532
#VU116107 - Command injection
CVE-2025-20334
CWE-77 High
No
No
Cupertino-17.9.8, 17.9.8, 17.12.6, 17.15.3, 17.17.1 25.09.2025 SB2025092530
#VU116106 - Incorrect Initialization of Resource
CVE-2025-20338
CWE-1419 Low
No
No
Cupertino-17.9.8, 16.12.14, 17.9.8, 17.12.6, 17.12.6a, 17.15.1z, 17.15.4, 17.15.4a, 17.15.4b, 17.17.1, 17.18.1, 17.18.1a 25.09.2025 SB2025092529
#VU116105 - Buffer Access with Incorrect Length Value
CVE-2025-20315
CWE-805 Medium
No
No
16.12.14, 17.9.7, 17.9.7a, 17.9.7b, 17.12.1z4, 17.12.5, 17.12.5c, 17.12.5a, 17.12.5b, 17.12.6, 17.12.6a, 17.15.1y, 17.15.1z, 17.15.3, 17.15.3a, 17.15.3b, 17.15.4, 17.15.4a, 17.15.4b, 17.17.1, 17.18.1, 17.18.1a 25.09.2025 SB2025092528
#VU116084 - Buffer overflow
CVE-2025-20149
CWE-120 Low
No
No
16.12.13, 17.9.7, 17.12.5, 17.15.3 24.09.2025 SB2025092463
#VU116083 - Stack-based buffer overflow
CVE-2025-20352
CWE-121 High
No
Exploited
17.12.6 24.09.2025 SB2025092462
#VU116082 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-20312
CWE-835 Medium
No
No
17.12.6, 17.15.4 24.09.2025 SB2025092461
#VU116081 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20240
CWE-79 Low
No
No
16.12.14, 17.12.6, 17.15.1z, 17.15.4 24.09.2025 SB2025092460
#VU116080 - Improper Authentication
CVE-2025-20160
CWE-287 Medium
No
No
17.12.6, 17.15.4 24.09.2025 SB2025092459
#VU108841 - Buffer Access with Incorrect Length Value
CVE-2025-20191
CWE-805 Medium
No
No
16.12.2, 16.12.2s, 16.12.2t, 16.12.2a, 16.12.3, 16.12.3s, 16.12.3a, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5 b, 16.12.6, 16.12.6a, 16.12.7, 16.12.8, 16.12.9, 16.12.10, 16.12.10a, 16.12.11, 16.12.12, 16.12.13, 17.1.1, 17.1.1s, 17.1.1t, 17.1.1a, 17.1.2, 17.1.3, 17.2.1, 17.2.1v, 17.2.1LA, 17.2.1a, 17.2.1r, 17.2.2, 17.2.3, 17.3.1, 17.3.1w, 17.3.1x, 17.3.1z, 17.3.1a, 17.3.2, 17.3.2a, 17.3.3, 17.3.3a, 17.3.4, 17.3.4c, 17.3.4a, 17.3.4 b, 17.3.5, 17.3.5a, 17.3.5b, 17.3.6, 17.3.7, 17.3.8, 17.3.8a, 17.4.1, 17.4.1c, 17.4.1a, 17.4.1b, 17.4.2, 17.4.2a, 17.5.1, 17.5.1c, 17.05.01c, 17.5.1a, 17.5.1b, 17.6.1, 17.6.1w, 17.6.1x, 17.6.1y, 17.6.1z, 17.6.1z1, 17.6.1a, 17.6.2, 17.6.3, 17.6.3a, 17.6.4, 17.6.5, 17.6.5a, 17.6.6, 17.6.6a, 17.6.7, 17.6.8, 17.7.1, 17.7.1a, 17.7.1b, 17.7.2, 17.8.1, 17.8.1a, 17.9.1, 17.9.1w, 17.9.1x, 17.9.1x1, 17.9.1y, 17.9.1y1, 17.9.1a, 17.9.2, 17.9.2a, 17.9.3, 17.9.3a, 17.9.4, 17.9.4a, 17.9.5, 17.9.5c, 17.9.5d, 17.9.5e, 17.9.5f, 17.9.5a, 17.9.5b, 17.9.6, 17.9.6a, 17.9.6b, 17.9.7, 17.9.7a, 17.10.1, 17.10.1a, 17.10.1b, 17.11.1, 17.11.1a, 17.12.1, 17.12.1w, 17.12.1x, 17.12.1y, 17.12.1z1, 17.12.1z2, 17.12.1z3, 17.12.1z4, 17.12.1a, 17.12.2, 17.12.3, 17.12.3a, 17.12.4, 17.12.4a, 17.12.4b, 17.12.5, 17.12.5a, 17.13.1a, 17.14.1, 17.14.1a, 17.15.1, 17.15.1w, 17.15.1x, 17.15.1y, 17.15.1a, 17.15.1b, 17.15.2, 17.15.2c, 17.15.2a, 17.15.2b, 17.15.3, 17.15.3a, 17.16.1, 17.16.1a, 17.17.1 09.05.2025 SB2025050948


Showing elements 21 - 40 out of 312