Known vulnerabilities in Cisco IOS XE - page 3

Software: Cisco IOS XE
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xe:*:*:*:*:*:*:*:*
Total vulnerabilities: 312
Public exploits: 7
Known exploited (KEV): 34
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XE Cisco IOS XE is affected by 312 known vulnerabilities: 4 critical, 53 high, 121 medium, 134 low Critical High Medium Low

Vulnerabilities (312)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108838 - Configuration
CVE-2025-20151
CWE-16 Medium
No
No
17.15.3, 17.17.1 09.05.2025 SB2025050935
#VU108835 - Improper input validation
CVE-2025-20154
CWE-20 High
No
No
16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4s, 16.6.4a, 16.6.5, 16.6.5a, 16.6.5b, 16.6.6, 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.6.10, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.7.4, 16.8.1, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.1a, 16.8.1b, 16.8.2, 16.8.3, 16.9.1, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.1a, 16.9.1b, 16.9.2, 16.9.2s, 16.9.2a, 16.9.3, 16.9.3h, 16.9.3s, 16.9.3a, 16.9.4, 16.9.4c, 16.9.5, 16.9.5f, 16.9.6, 16.9.7, 16.9.8, 16.9.8a, 16.9.8b, 16.10.1, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1f, 16.10.1g, 16.10.1i, 16.10.1s, 16.10.1a, 16.10.1b, 16.10.2, 16.10.3, 16.11.1, 16.11.1c, 16.11.1s, 16.11.1a, 16.11.1b, 16.11.2, 16.12.1, 16.12.1c, 16.12.1s, 16.12.1t, 16.12.1v, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.1z1, 16.12.1z2, 16.12.1a, 16.12.2, 16.12.2s, 16.12.2t, 16.12.2a, 16.12.3, 16.12.3s, 16.12.3a, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5 b, 16.12.6, 16.12.6a, 16.12.7, 16.12.8, 16.12.9, 16.12.10, 16.12.10a, 16.12.11, 16.12.12, 17.1.1, 17.1.1s, 17.1.1t, 17.1.1a, 17.1.2, 17.1.3, 17.2.1, 17.2.1v, 17.2.1LA, 17.2.1a, 17.2.1r, 17.2.2, 17.2.3, 17.3.1, 17.3.1w, 17.3.1x, 17.3.1z, 17.3.1a, 17.3.2, 17.3.2a, 17.3.3, 17.3.3a, 17.3.4, 17.3.4c, 17.3.4a, 17.3.4 b, 17.3.5, 17.3.5a, 17.3.5b, 17.3.6, 17.3.7, 17.3.8, 17.3.8a, 17.4.1, 17.4.1c, 17.4.1a, 17.4.1b, 17.4.2, 17.4.2a, 17.5.1, 17.5.1c, 17.05.01c, 17.5.1a, 17.5.1b, 17.6.1, 17.6.1w, 17.6.1x, 17.6.1y, 17.6.1z, 17.6.1z1, 17.6.1a, 17.6.2, 17.6.3, 17.6.3a, 17.6.4, 17.6.5, 17.6.5a, 17.6.6, 17.6.6a, 17.6.7, 17.6.8, 17.6.8a, 17.7.1, 17.7.1a, 17.7.1b, 17.7.2, 17.8.1, 17.8.1a, 17.9.1, 17.9.1w, 17.9.1x, 17.9.1x1, 17.9.1y, 17.9.1y1, 17.9.1a, 17.9.2, 17.9.2a, 17.9.3, 17.9.3a, 17.9.4, 17.9.4a, 17.9.5, 17.9.5c, 17.9.5d, 17.9.5a, 17.9.5b, 17.9.6, 17.9.6a, 17.10.1, 17.10.1a, 17.10.1b, 17.11.1, 17.11.1a, 17.12.1, 17.12.1w, 17.12.1x, 17.12.1y, 17.12.1z, 17.12.1z1, 17.12.2, 17.12.2a, 17.12.02a, 17.12.3, 17.12.3a, 17.12.4, 17.13.1, 17.13.1a, 17.14.1, 17.14.1a, 17.15.1, 17.15.1w, 17.15.1a, 17.15.1b 09.05.2025 SB2025050934
#VU108832 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20186
CWE-78 Medium
No
No
16.11.1, 16.11.1c, 16.11.1s, 16.11.1a, 16.11.1b, 16.11.2, 16.12.1, 16.12.1c, 16.12.1s, 16.12.1t, 16.12.1v, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.1z1, 16.12.1z2, 16.12.1a, 16.12.2, 16.12.2s, 16.12.2t, 16.12.2a, 16.12.3, 16.12.3s, 16.12.3a, 17.1.1, 17.1.1s, 17.1.1t, 17.1.1a, 17.1.2, 17.1.3, 17.2.1, 17.2.1v, 17.2.1LA, 17.2.1a, 17.2.1r, 17.6.8, 17.6.8a, 17.9.6, 17.9.6a, 17.9.6b, 17.9.7, 17.9.7a, 17.12.1z2, 17.12.1z3, 17.12.5, 17.12.5a, 17.15.1, 17.15.1w, 17.15.1x, 17.15.1y, 17.15.1a, 17.15.1b, 17.15.2, 17.15.2c, 17.15.2a, 17.15.2b, 17.15.3, 17.16.1, 17.16.1a, 17.17.1 09.05.2025 SB2025050932
#VU108831 - Cross-Site Request Forgery (CSRF)
CVE-2025-20195
CWE-352 Low
No
No
16.12.13, 17.6.8, 17.6.8a, 17.9.6, 17.9.6a, 17.9.6b, 17.9.7, 17.9.7a, 17.12.1z2, 17.12.1z3, 17.12.4, 17.12.4a, 17.12.4b, 17.12.5, 17.12.5a, 17.15.1, 17.15.1w, 17.15.1x, 17.15.1y, 17.15.1a, 17.15.1b, 17.15.2, 17.15.2c, 17.15.2a, 17.15.2b, 17.15.3, 17.16.1, 17.16.1a, 17.17.1 09.05.2025 SB2025050931
#VU108830 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20194
CWE-78 Medium
No
No
17.9.7, 17.9.7a, 17.12.1z2, 17.12.1z3, 17.12.5, 17.12.5a, 17.15.1x, 17.15.1y, 17.15.2, 17.15.2c, 17.15.2a, 17.15.2b, 17.15.3, 17.16.1, 17.16.1a, 17.17.1 09.05.2025 SB2025050931
#VU108829 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20193
CWE-78 Medium
No
No
17.6.8, 17.6.8a, 17.9.6, 17.9.6a, 17.9.6b, 17.9.7, 17.9.7a, 17.12.1z2, 17.12.1z3, 17.12.4, 17.12.4a, 17.12.4b, 17.12.5, 17.12.5a, 17.15.1, 17.15.1w, 17.15.1x, 17.15.1y, 17.15.1a, 17.15.1b, 17.15.2, 17.15.2c, 17.15.2a, 17.15.2b, 17.15.3, 17.16.1, 17.16.1a, 17.17.1 09.05.2025 SB2025050931
#VU108827 - Uncontrolled Memory Allocation
CVE-2025-20140
CWE-789 Medium
No
No
17.9.6, 17.9.6a, 17.9.6b, 17.9.7, 17.9.7a, 17.12.1z2, 17.12.1z3, 17.12.4, 17.12.4a, 17.12.4b, 17.12.5, 17.12.5a, 17.15.1, 17.15.1w, 17.15.1x, 17.15.1y, 17.15.1a, 17.15.1b, 17.15.2, 17.15.2c, 17.15.2a, 17.15.2b, 17.15.3, 17.16.1, 17.16.1a, 17.17.1 09.05.2025 SB2025050929
#VU108779 - Use of Hard-coded Credentials
CVE-2025-20188
CWE-798 Critical
No
No
- 07.05.2025 SB2025050785
#VU103680 - Error Handling
CVE-2025-20174
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103681 - Error Handling
CVE-2025-20175
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103682 - Error Handling
CVE-2025-20176
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103675 - Error Handling
CVE-2025-20169
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103676 - Error Handling
CVE-2025-20170
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103677 - Error Handling
CVE-2025-20171
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103678 - Error Handling
CVE-2025-20172
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU103679 - Error Handling
CVE-2025-20173
CWE-388 Medium
No
No
- 06.02.2025 SB2025020624
SB2025020625
#VU97731 - State Issues
CVE-2024-20455
CWE-371 High
No
No
17.6.7, 17.6.8, 17.9.6, 17.12.1x, 17.12.1y, 17.12.1z, 17.12.1z1, 17.12.3, 17.12.3a, 17.12.4, 17.14.1, 17.14.1a, 17.15.1, 17.15.1a, 17.15.1b 26.09.2024 SB2024092653
#VU97730 - Cross-Site Request Forgery (CSRF)
CVE-2024-20414
CWE-352 Low
No
No
16.12.12, 17.12.1z, 17.12.1z1, 17.12.4, 17.14.1, 17.14.1a, 17.15.1, 17.15.1a 26.09.2024 SB2024092645
#VU97729 - Stack-based buffer overflow
CVE-2024-20433
CWE-121 High
No
No
Dublin-17.12.4, 16.12.12, 17.6.8, 17.9.6, 17.12.1z, 17.12.1z1, 17.12.4, 17.15.1, 17.15.1a, 17.15.1b 26.09.2024 SB2024092643
#VU97725 - NULL Pointer Dereference
CVE-2024-20436
CWE-476 High
No
No
17.6.7, 17.9.5, 17.12.1z, 17.12.1z1, 17.12.2, 17.13.1a 26.09.2024 SB2024092642


Showing elements 41 - 60 out of 312