Known vulnerabilities in Cisco IOS XE - page 7

Software: Cisco IOS XE
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xe:*:*:*:*:*:*:*:*
Total vulnerabilities: 312
Public exploits: 7
Known exploited (KEV): 34
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IOS XE Cisco IOS XE is affected by 312 known vulnerabilities: 4 critical, 53 high, 121 medium, 134 low Critical High Medium Low

Vulnerabilities (312)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62336 - Permissions, Privileges, and Access Controls
CVE-2022-20727
CWE-264 Low
No
No
16.12(6), 17.3(5), 17.6(2), 17.7(1) 14.04.2022 SB2022041415
#VU62335 - Improper input validation
CVE-2022-20726
CWE-20 Medium
No
No
16.12(6), 17.3(5), 17.6(2), 17.7(1) 14.04.2022 SB2022041415
#VU62334 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20725
CWE-79 Low
No
No
16.12(6), 17.3(5), 17.6(2), 17.7(1) 14.04.2022 SB2022041415
#VU62333 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-20724
CWE-362 Medium
No
No
16.12(6), 17.3(5), 17.6(2), 17.7(1) 14.04.2022 SB2022041415
#VU62332 - Execution with Unnecessary Privileges
CVE-2022-20723
CWE-250 Low
No
No
16.12(6), 17.3(5), 17.6(2), 17.7(1) 14.04.2022 SB2022041415
#VU62331 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20722
CWE-22 Low
No
No
16.12(6), 17.3(5), 17.6(2), 17.7(1) 14.04.2022 SB2022041415
#VU62330 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20721
CWE-22 Low
No
No
16.12(6), 17.3(5), 17.6(2), 17.7(1) 14.04.2022 SB2022041415
#VU62329 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20720
CWE-22 Low
No
No
16.12(6), 17.3(5), 17.6(2), 17.7(1) 14.04.2022 SB2022041415
#VU62325 - Execution with Unnecessary Privileges
CVE-2022-20676
CWE-250 Low
No
No
- 14.04.2022 SB2022041414
#VU62324 - Incorrect Privilege Assignment
CVE-2022-20681
CWE-266 Low
No
No
Amsterdam-17.3.5, Gibraltar-16.12.7, Cupertino-17.7.1, Cupertino-17.7.1a, 16.12(6.29), 16.12.7, 17.3(4.22), 17.3.5, 17.3.5a, 17.6(1.19), 17.6.2, 17.6.3, 17.7(0.94), 17.7.1, 17.7.1a, 17.8(0.15) 14.04.2022 SB2022041413
#VU62323 - Integer overflow
CVE-2022-20684
CWE-190 Low
No
No
Amsterdam 17.2.1, Amsterdam 17.2.1r, Amsterdam 17.3.1, 16.12.3, 16.12.3s, 16.12.3a, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5 b, 16.12.6, 16.12.6a, 16.12.7, 17.2.1, 17.2.1v, 17.2.1a, 17.2.1r, 17.2.2, 17.2.3, 17.3.0.42, 17.3.1, 17.3.1w, 17.3.1x, 17.3.1a, 17.3.2, 17.3.2a, 17.3.3, 17.3.4, 17.3.4c, 17.3.4a, 17.3.4 b, 17.3.5, 17.3.5a, 17.4.1, 17.4.1a, 17.4.1b, 17.4.2, 17.5.1, 17.5.1a, 17.6.1, 17.6.1a, 17.6.2, 17.6.3, 17.7.1, 17.7.1a 14.04.2022 SB2022041412
#VU62322 - Buffer Underwrite ('Buffer Underflow')
CVE-2022-20683
CWE-124 High
No
No
Bengaluru-17.5.1, Bengaluru-17.6.1, Gibraltar-16.12.7, 16.12(6.34), 16.12.7, 17.3(2.19), 17.3.3, 17.3.4, 17.3.4c, 17.3.4a, 17.3.4 b, 17.3.5, 17.3.5a, 17.5(0.171), 17.5.1, 17.5.1a, 17.6(0.43), 17.6.1, 17.6.1a, 17.6.2, 17.6.3, 17.7.1, 17.7.1a 14.04.2022 SB2022041411
#VU62321 - Unchecked Return Value
CVE-2022-20682
CWE-252 High
No
No
Amsterdam-17.3.4, Bengaluru-17.6.1, Gibraltar-16.12.7, Cupertino-17.7.1, Cupertino-17.7.1a, 16.12(6.33), 16.12.7, 17.3(3.4), 17.3.4, 17.3.4c, 17.3.4a, 17.3.4 b, 17.3.5, 17.3.5a, 17.6(0.88), 17.6.1, 17.6.1a, 17.6.2, 17.6.3, 17.7(0.2), 17.7.1, 17.7.1a 14.04.2022 SB2022041410
#VU62317 - Improper Resource Locking
CVE-2022-20678
CWE-413 High
No
No
Amsterdam-17.3.4, Bengaluru-17.4.2, Bengaluru-17.5.1, Bengaluru-17.6.1, Gibraltar-16.12.6, 16.12(5.24), 16.12.6, 17.3(3.6), 17.3.4, 17.3.4 b, 17.4(1.62), 17.4.2, 17.5(0.184), 17.5.1, 17.6(0.52), 17.6.1 14.04.2022 SB2022041409
#VU62315 - Reachable Assertion
CVE-2022-20694
CWE-617 Medium
No
No
Amsterdam-17.3.5, ap-17.3.5.5, ap-17.3.5.42, ap-17.6.2.43, ap-17.6.3.2, ap-17.7.1.2, ap-17.7.2.3, ap-17.8.0.68, Bengaluru-17.6.2, 008.010, 8.10.171.0, 15.3(03)JK07, 16.6(9.26), 16.11.1, 16.11.1c, 16.11.1s, 16.11.1a, 16.11.1b, 16.11.2, 16.12.1, 16.12.1c, 16.12.1s, 16.12.1t, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.1z1, 16.12.1z2, 16.12.1a, 16.12.2, 16.12.2s, 16.12.2t, 16.12.2a, 16.12.3, 16.12.3s, 16.12.3a, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5 b, 16.12.6, 16.12.6a, 16.12.7, 17.1.1, 17.1.1s, 17.1.1t, 17.1.1a, 17.1.2, 17.1.3, 17.2.1, 17.2.1v, 17.2.1a, 17.2.1r, 17.2.2, 17.2.3, 17.3.1, 17.3.1w, 17.3.1x, 17.3.1z, 17.3.1a, 17.3.2, 17.3.2a, 17.3.3, 17.3.4, 17.3.4c, 17.3.4a, 17.3.4 b, 17.3.5, 17.3.5a, 17.4.1, 17.4.1a, 17.4.1b, 17.4.2, 17.5.1, 17.5.1a, 17.6.1, 17.6.1w, 17.6.1x, 17.6.1a, 17.6.2, 17.6.3, 17.7.1, 17.7.1a 14.04.2022 SB2022041408
#VU56875 - Improper input validation
CVE-2021-34714
CWE-20 Medium
No
No
16.9.8, 16.12.5, 16.12.5 b, 16.12.6, 17.3.3, 17.3.4, 17.5.1, 17.6.1 24.09.2021 SB2021092427
#VU56874 - Improper Access Control
CVE-2021-1625
CWE-284 Medium
No
No
17.2.3, 17.3.3, 17.3.4a, 17.4.1b, 17.4.2, 17.5.1a, 17.6.1a 24.09.2021 SB2021092426
#VU56873 - Improper Interaction Between Multiple Correctly-Behaving Entities
CVE-2021-34699
CWE-435 Medium
No
No
16.9.8, 16.12.6, 17.3.4, 17.6.1 24.09.2021 SB2021092425
#VU56866 - Resource Management Errors
CVE-2021-1624
CWE-399 Medium
No
No
16.6.10, 16.9.8, 16.12.6, 17.3.4a, 17.4.2, 17.6.1a 24.09.2021 SB2021092418
#VU56865 - Improper Initialization
CVE-2021-34697
CWE-665 Medium
No
No
17.3.3, 17.3.4a, 17.4.2, 17.5.1a, 17.6.1a 24.09.2021 SB2021092417


Showing elements 121 - 140 out of 312