Known vulnerabilities in Cisco IOS XE - page 5

Software: Cisco IOS XE
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xe:*:*:*:*:*:*:*:*
Total vulnerabilities: 312
Public exploits: 7
Known exploited (KEV): 34
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XE Cisco IOS XE is affected by 312 known vulnerabilities: 4 critical, 53 high, 121 medium, 134 low Critical High Medium Low

Vulnerabilities (312)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82295 - Improper Privilege Management
CVE-2023-20273
CWE-269 High
Available
Exploited
16.12.10a, 17.3.8a, 17.6.6a, 17.9.4a 23.10.2023 SB2023101701
#VU81670 - Permissions, Privileges, and Access Controls
CVE-2023-20235
CWE-264 Low
No
No
17.3.8, 17.6.6, 17.9.5, 17.13.1 06.10.2023 SB2023100606
#VU81291 - Improper input validation
CVE-2023-20202
CWE-20 Low
No
No
17.9.1y1, 17.9.3, 17.9.3a, 17.9.4, 17.11.1, 17.11.1a, 17.12.1, 17.12.1a 29.09.2023 SB2023092938
#VU81289 - Improper input validation
CVE-2023-20187
CWE-20 High
No
No
17.9.4, 17.12.1, 17.12.1a 29.09.2023 SB2023092937
#VU81288 - Improper input validation
CVE-2023-20226
CWE-20 High
No
No
17.9.3, 17.9.3a, 17.9.4, 17.11.1, 17.11.1a, 17.12.1, 17.12.1a 29.09.2023 SB2023092936
#VU81286 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20231
CWE-78 Medium
No
No
16.12.10, 17.3.7, 17.9.3, 17.9.4, 17.11.1, 17.11.1a, 17.12.1, 17.12.1a 29.09.2023 SB2023092931
#VU81270 - Out-of-bounds write
CVE-2023-20109
CWE-787 High
No
Exploited
16.12.10, 17.3.7, 17.9.1y, 17.9.3, 17.9.4, 17.11.1, 17.12.1 29.09.2023 SB2023092914
#VU81257 - Resource Management Errors
CVE-2023-20033
CWE-399 Medium
No
No
16.12.10 28.09.2023 SB2023092822
#VU81249 - Error Handling
CVE-2023-20227
CWE-388 Medium
No
No
- 28.09.2023 SB2023092819
#VU81248 - Improper Authorization
CVE-2023-20186
CWE-285 Low
No
No
16.12.10, 17.9.1y, 17.9.4, 17.12.1 28.09.2023 SB2023092818
#VU73991 - Improper input validation
CVE-2023-20072
CWE-20 High
No
No
17.9.1x, 17.9.1x1, 17.9.2, 17.9.2a, 17.9.3, 17.10.1, 17.10.1a, 17.10.1b 23.03.2023 SB2023032349
#VU73990 - Permissions, Privileges, and Access Controls
CVE-2023-20029
CWE-264 Low
No
No
Cupertino-17.9.1, Cupertino-17.9.1a, 17.9(0.4), 17.9.1, 17.9.1w, 17.9.1x, 17.9.1x1, 17.9.1a, 17.9.2, 17.9.2a, 17.9.3, 17.10.1, 17.10.1a, 17.10.1b 23.03.2023 SB2023032347
#VU73989 - Permissions, Privileges, and Access Controls
CVE-2023-20065
CWE-264 Low
No
No
Dublin-17.10.1, Dublin-17.10.1a, Cupertino-17.9.3, 17.3(6.28), 17.9(2.2), 17.9.3, 17.10(0.40), 17.10.1, 17.10.1a, 17.11(0.23) 23.03.2023 SB2023032345
#VU73988 - Improper input validation
CVE-2023-20027
CWE-20 High
No
No
17.3.6, 17.6.4, 17.6.5, 17.9.1, 17.9.1w, 17.9.1x, 17.9.1x1, 17.9.1a, 17.9.2, 17.9.2a, 17.9.3, 17.10.1, 17.10.1a, 17.10.1b 23.03.2023 SB2023032344
#VU73987 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20035
CWE-78 Low
No
No
17.6.4, 17.6.5, 17.9.1, 17.9.1w, 17.9.1x, 17.9.1x1, 17.9.1a, 17.9.2, 17.9.2a, 17.9.3, 17.10.1, 17.10.1a, 17.10.1b 23.03.2023 SB2023032342
#VU73986 - Improper input validation
CVE-2023-20067
CWE-20 Low
No
No
17.6.5, 17.9.1x, 17.9.1x1, 17.9.2, 17.9.2a, 17.9.3, 17.10.1, 17.10.1a, 17.10.1b 23.03.2023 SB2023032341
#VU73985 - Improper input validation
CVE-2023-20100
CWE-20 Medium
No
No
Cupertino-17.9.1, 17.3.6, 17.6.4, 17.6.5, 17.9.1w, 17.9.1x, 17.9.1x1, 17.9.1a, 17.9.2, 17.9.2a, 17.9.3, 17.10.1a, 17.10.1b 23.03.2023 SB2023032340
#VU73984 - Improper Verification of Cryptographic Signature
CVE-2023-20082
CWE-347 Low
No
No
16.11.1 23.03.2023 SB2023032337
#VU73983 - Improper input validation
CVE-2023-20080
CWE-20 High
No
No
Amsterdam-17.3.4, Bengaluru-17.5.1, Bengaluru-17.6.1, Gibraltar-16.12.8, 15.2(04)E10d, 15.2(07)E07, 15.8(03)M09, 15.9(03)M06, 16.12(6.165), 16.12.8, 17.3(3.8), 17.3.4, 17.3.4c, 17.3.4a, 17.3.4 b, 17.3.5, 17.3.5a, 17.3.5b, 17.3.6, 17.5(0.143), 17.5.1, 17.5.1a, 17.5.1b, 17.6(0.18), 17.6.1, 17.6.1w, 17.6.1x, 17.6.1y, 17.6.1z, 17.6.1z1, 17.6.1a, 17.6.2, 17.6.3, 17.6.3a, 17.6.4, 17.6.5, 17.7.1, 17.7.1a, 17.7.2, 17.8.1, 17.8.1a, 17.9.1, 17.9.1w, 17.9.1x, 17.9.1x1, 17.9.1a, 17.9.2, 17.9.2a, 17.9.3, 17.10.1, 17.10.1a, 17.10.1b 23.03.2023 SB2023032333
#VU73981 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-20066
CWE-22 Medium
No
No
Bengaluru-17.6.5, Dublin-17.10.1, Dublin-17.10.1a, Cupertino-17.9.2, 16.12.9, 17.3(6.8), 17.6(4.15), 17.6.5, 17.9.1x, 17.9.1x1, 17.9(1.2), 17.9.2, 17.9.2a, 17.9.3, 17.10(0.41), 17.10.1, 17.10.1a, 17.10.1b, 17.11(0.7) 23.03.2023 SB2023032328


Showing elements 81 - 100 out of 312