Known vulnerabilities in Cisco IOS XE - page 4

Software: Cisco IOS XE
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xe:*:*:*:*:*:*:*:*
Total vulnerabilities: 312
Public exploits: 7
Known exploited (KEV): 34
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XE Cisco IOS XE is affected by 312 known vulnerabilities: 4 critical, 53 high, 121 medium, 134 low Critical High Medium Low

Vulnerabilities (312)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97728 - Incorrect Authorization
CVE-2024-20510
CWE-863 Low
No
No
16.12.12, 17.6.8, 17.9.6, 17.12.1z, 17.12.1z1, 17.12.4, 17.14.1, 17.14.1a, 17.15.1, 17.15.1a, 17.15.1b 26.09.2024 SB2024092637
#VU97727 - Operator Precedence Logic Error
CVE-2024-20480
CWE-783 High
No
No
Dublin-17.12.4, 3.1.4aS_V150_1_S4A_FC2, 3.3.2S_V151_2_S2_FC1, 3.3.2SE_V150_1_EZ2, 3.3.3SE_V150_1_EZ3, 3.3.4SE_V150_1_EZ4, 3.3.5SE_V150_1_EZ5, 3.4.0aS_V151_3_S0A_FC1, 3.4.1S_V151_3_S1_FC1, 3.4.2S_V151_3_S2_FC1, 3.4.3S_V151_3_S3_FC1, 3.4.4S_V151_3_S4_FC1, 3.4.7S_V151_3_S7_FC1, 3.04.7S_V151_3_S7_FC1, 3.5.0S_V152_1_S_FC1, 3.5.2S_V152_1_S2_FC1, 3.6.1S_V152_2_S1_FC1, 3.6.2S_V152_2_S2_FC1, 3.6.4E_V152_2_E4, 3.7.0S_V152_4_S_FC4, 3.7.2S_V152_4_S2_FC1, 3.7.5S_V152_4_S5_FC1, 3.7.6S_V152_4_S6_FC4, 3.7.7S_V152_4_S7_FC4, 3.7.8S_V152_4_S8_FC2, 3.8.0S_V153_1_S_FC4, 3.10.2aS_V153_3_S2A_FC1, 3.10.2S_V153_3_S2_FC3, 3.10.2tS_V153_3_S2T_FC1, 3.10.3S_V153_3_S3_FC1, 3.10.4S_V153_3_S4_FC1, 3.10.6S_V153_3_S6_FC5, 3.10.7S_V153_3_S7_FC1, 3.10.8aS_V153_3_S8A_FC1, 3.10.8S_V153_3_S8_FC1, 3.10.9S_V153_3_S9_FC2, 3.10.10S_V153_3_S10_FC2, 3.11.1S_V154_1_S1_FC2, 3.11.2S_V154_1_S2_FC3, 3.11.3S_V154_1_S3_FC6, 3.11.4S_V154_1_S4_FC2, 3.12.0aS_V154_2_S0A_FC2, 3.12.0S_V154_2_S_FC2, 3.12.1S_V154_2_S1_FC4, 3.12.2S_V154_2_S2_FC4, 3.12.3S_V154_2_S3_FC2, 3.12.4S_V154_2_S4_FC2, 3.13.0aS_V154_3_S0A_FC2, 3.13.0S_V154_3_S_FC11, 3.13.1S_V154_3_S1_FC3, 3.13.2aS_V154_3_S2A_FC2, 3.13.2S_V154_3_S2_FC3, 3.13.3S_V154_3_S3_FC1, 3.13.4S_V154_3_S4_FC3, 3.13.5aS_V154_3_S5A_FC2, 3.13.5S_V154_3_S5_FC1, 3.13.6aS_V154_3_S6A_FC2, 3.13.6bS_V154_3_S6B_FC1, 3.13.6S_V154_3_S6_FC1, 3.13.7aS_V154_3_S7A_FC1, 3.13.7S_V154_3_S7_FC3, 3.13.8S_V154_3_S8_FC2, 3.13.9S_V154_3_S9_FC2, 3.13.10S_V154_3_S10_FC1, 3.14.0S_V155_1_S_FC5, 3.14.1S_V155_1_S1_FC1, 3.14.2S_V155_1_S2_FC2, 3.14.3S_V155_1_S3_FC3, 3.14.4S_V155_1_S4_FC5, 3.15.0S_V155_2_S_FC3, 3.15.1S_V155_2_S1_FC1, 3.15.1cS_V155_2_S1C_FC1, 3.15.2S_V155_2_S2_FC1, 3.15.3S_V155_2_S3_FC2, 3.15.4S_V155_2_S4_FC1, 3.16.0aS_V155_3_S0A_FC3, 3.16.0bS_V155_3_S0B_FC2, 3.16.0S_V155_3_S_FC6, 3.16.0cS_V155_3_S0C_FC1, 3.16.1aS_V155_3_S1A_FC1, 3.16.1S_V155_3_S1_FC1, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.2S_V155_3_S2_FC2, 3.16.3aS_V155_3_S3A_FC1, 3.16.3S_V155_3_S3_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.6bS_V155_3_S6B_FC4, 3.16.6S, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.7S_V155_3_S7_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.16.10aS_V155_3_S10A_FC8, 3.16.10bS_V155_3_S10B_FC2, 3.16.10S_V155_3_S10_FC3, 3.17.0S_V156_1_S_FC4, 3.17.1aS_V156_1_S1A_FC1, 3.17.1S_V156_1_S1_FC3, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.0S_V156_2_SP_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1S_V156_2_SP1_FC3, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.1SP_V156_2_SP1_FC3, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.2S_V156_2_SP2_FC2, 3.18.2SP_V156_2_SP2_FC2, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.3S_V156_2_SP3_FC4, 3.18.3SP_V156_2_SP3_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.4SP_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4, 3.18.7SP_V156_2_SP7_FC2, 3.18.8aSP_V156_2_SP8A_FC2, 3.18.9SP_V156_2_SP9_FC3, 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.2.1, 16.2.2, 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5c, 16.3.5a, 16.3.5b, 16.3.6, 16.3.7, 16.3.8, 16.3.9, 16.3.10, 16.3.11, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4s, 16.6.4a, 16.6.5, 16.6.5a, 16.6.5b, 16.6.6, 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.6.10, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.7.4, 16.8.1, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.1a, 16.8.1b, 16.8.2, 16.8.3, 16.9.1, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.1a, 16.9.1b, 16.9.2, 16.9.2s, 16.9.2a, 16.9.3, 16.9.3h, 16.9.3s, 16.9.3a, 16.9.4, 16.9.4c, 16.9.5, 16.9.5f, 16.9.6, 16.9.7, 16.9.8, 16.9.8a, 16.9.8b, 16.10.1, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1f, 16.10.1g, 16.10.1i, 16.10.1s, 16.10.1a, 16.10.1b, 16.10.2, 16.10.3, 16.11.1, 16.11.1c, 16.11.1s, 16.11.1a, 16.11.1b, 16.11.2, 16.12.1, 16.12.1c, 16.12.1s, 16.12.1t, 16.12.1v, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.1z1, 16.12.1z2, 16.12.1a, 16.12.2, 16.12.2s, 16.12.2t, 16.12.2a, 16.12.3, 16.12.3s, 16.12.3a, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5 b, 16.12.6, 16.12.6a, 16.12.7, 16.12.8, 16.12.9, 16.12.10, 16.12.10a, 16.12.12, 17.1.1, 17.1.1s, 17.1.1t, 17.1.1a, 17.1.2, 17.1.3, 17.2.1, 17.2.1v, 17.2.1LA, 17.2.1a, 17.2.1r, 17.2.2, 17.2.3, 17.3.1, 17.3.1w, 17.3.1x, 17.3.1z, 17.3.1a, 17.3.2, 17.3.2a, 17.3.3, 17.3.3a, 17.3.4, 17.3.4c, 17.3.4a, 17.3.4 b, 17.3.5, 17.3.5a, 17.3.5b, 17.3.6, 17.3.7, 17.4.1, 17.4.1c, 17.4.1a, 17.4.1b, 17.4.2, 17.4.2a, 17.5.1, 17.5.1c, 17.05.01c, 17.5.1a, 17.5.1b, 17.6.1, 17.6.1w, 17.6.1x, 17.6.1y, 17.6.1z, 17.6.1z1, 17.6.1a, 17.6.2, 17.6.3, 17.6.3a, 17.6.4, 17.6.5, 17.6.5a, 17.6.8, 17.7.1, 17.7.1a, 17.7.1b, 17.7.2, 17.8.1, 17.8.1a, 17.9.1, 17.9.1w, 17.9.1x, 17.9.1x1, 17.9.1y, 17.9.1y1, 17.9.1a, 17.9.2, 17.9.2a, 17.9.3, 17.9.3a, 17.9.4, 17.9.4a, 17.9.6, 17.10.1, 17.10.1a, 17.10.1b, 17.11.1, 17.11.1a, 17.12.1, 17.12.1w, 17.12.1a, 17.12.4, 17.15.1, 17.15.1a, 17.15.1b 26.09.2024 SB2024092639
#VU97726 - Improper input validation
CVE-2024-20464
CWE-20 High
No
No
17.14.1, 17.14.1a, 17.15.1, 17.15.1a 26.09.2024 SB2024092641
#VU97724 - Cross-Site Request Forgery (CSRF)
CVE-2024-20437
CWE-352 Low
No
No
17.6.7, 17.6.8, 17.9.5, 17.9.5c, 17.9.5d, 17.9.5a, 17.9.5b, 17.9.6, 17.12.1z, 17.12.1z1, 17.12.2, 17.12.02a, 17.12.2a, 17.12.3, 17.12.3a, 17.12.4, 17.13.1, 17.13.1a, 17.14.1, 17.14.1a, 17.15.1, 17.15.1a, 17.15.1b 26.09.2024 SB2024092628
#VU97722 - Integer overflow
CVE-2024-20434
CWE-190 Low
No
No
Dublin-17.12.4, 17.6.8, 17.9.6, 17.12.4, 17.15.1, 17.15.1a, 17.15.1b 26.09.2024 SB2024092623
#VU97706 - Resource Management Errors
CVE-2024-20467
CWE-399 Medium
No
No
17.12.2 25.09.2024 SB2024092540
#VU89834 - Authentication Bypass by Spoofing
CVE-2024-20363
CWE-290 Medium
No
No
17.12.3, 17.13.1 27.05.2024 SB2024052726
#VU88807 - Improper Access Control
CVE-2024-20373
CWE-284 Medium
No
No
Bengaluru-17.6.6, Dublin-17.11.1, Cupertino-17.9.4, 17.6.6a, 17.9.5, 17.9.5a, 17.11.1, 17.11.1a, 17.12.1, 17.12.1w, 17.12.1x, 17.12.1a, 17.12.2, 17.12.2a, 17.12.02a, 17.12.3, 17.13.1, 17.13.1a 18.04.2024 SB2024041821
#VU87904 - Incomplete cleanup
CVE-2024-20303
CWE-459 Low
No
No
17.6.6, 17.9.4, 17.12.1, 17.13.1 28.03.2024 SB2024032828
#VU87899 - Improper Handling of Parameters
CVE-2024-20306
CWE-233 Low
No
No
17.12.1x, 17.12.2, 17.12.02a, 17.12.2a, 17.12.3, 17.13.1, 17.13.1a 28.03.2024 SB2024032822
#VU87897 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-20308
CWE-124 High
No
No
Amsterdam-17.3.8, Bengaluru-17.6.6, Dublin-17.12.1, Dublin-17.12.2, Cupertino-17.9.4, Cupertino-17.9.5, 16.12.10, 16.12.10a, 17.3.8, 17.3.8a, 17.6.6, 17.6.6a, 17.9.1y1, 17.9.4, 17.9.4a, 17.9.5, 17.9.5a, 17.12.1, 17.12.1w, 17.12.1x, 17.12.1a, 17.12.2, 17.12.2a, 17.12.02a, 17.12.3, 17.13.1, 17.13.1a 28.03.2024 SB2024032817
#VU87896 - Heap-based Buffer Overflow
CVE-2024-20307
CWE-122 Medium
No
No
Amsterdam-17.3.8, Bengaluru-17.6.6, Dublin-17.12.1, Dublin-17.12.2, Cupertino-17.9.4, Cupertino-17.9.5, 16.12.10, 16.12.10a, 17.3.8, 17.3.8a, 17.6.6, 17.6.6a, 17.9.1y1, 17.9.4, 17.9.4a, 17.9.5, 17.9.5a, 17.12.1, 17.12.1w, 17.12.1x, 17.12.1a, 17.12.2, 17.12.2a, 17.12.02a, 17.12.3, 17.13.1, 17.13.1a 28.03.2024 SB2024032817
#VU87895 - Detection of error condition without action
CVE-2024-20316
CWE-390 Medium
No
No
Dublin-17.12.2, Dublin-17.12.3, Cupertino-17.9.5, 17.9.5, 17.9.5a, 17.11.1, 17.11.1a, 17.12.1, 17.12.1w, 17.12.1x, 17.12.1a, 17.12.2, 17.12.2a, 17.12.02a, 17.12.3, 17.13.1, 17.13.1a 28.03.2024 SB2024032816
#VU87894 - Improper input validation
CVE-2024-20309
CWE-20 Low
No
No
17.9.5, 17.9.5a, 17.12.1x, 17.12.3, 17.13.1, 17.13.1a 28.03.2024 SB2024032814
#VU87891 - Memory corruption
CVE-2024-20313
CWE-119 Low
No
No
Bengaluru-17.6.6, Dublin-17.12.1, Dublin-17.12.2, Cupertino-17.9.4, 17.6.6, 17.6.6a, 17.9.4, 17.9.4a, 17.9.5, 17.9.5a, 17.12.1, 17.12.1w, 17.12.1x, 17.12.1a, 17.12.2, 17.12.2a, 17.12.02a, 17.12.3, 17.13.1, 17.13.1a 28.03.2024 SB2024032812
#VU87889 - Incomplete List of Disallowed Inputs
CVE-2024-20278
CWE-184 Low
No
No
Dublin-17.12.2, Cupertino-17.9.5, 17.9.5, 17.12.2, 17.13.1, 17.13.1a 28.03.2024 SB2024032811
#VU87886 - Heap-based Buffer Overflow
CVE-2024-20259
CWE-122 High
No
No
Dublin-17.12.2, Cupertino-17.9.5, 17.9.5, 17.9.5a, 17.12.1x, 17.12.2, 17.12.02a, 17.12.2a, 17.12.3, 17.13.1, 17.13.1a 28.03.2024 SB2024032808
#VU82709 - Business Logic Errors (3.0)
CVE-2023-20246
CWE-840 Medium
No
No
17.12.2, 17.13.1 03.11.2023 SB2023110326
#VU82658 - Use After Free
CVE-2023-5178
CWE-416 Low
Available
No
- 01.11.2023 SB2023110142
SB2023110647
SB2023110658
and 72 more
#VU82065 - Improper Privilege Management
CVE-2023-20198
CWE-269 Critical
Available
Exploited
16.12.10a, 17.3.8a, 17.6.6a, 17.9.4a 17.10.2023 SB2023101701
SB2023102538


Showing elements 61 - 80 out of 312