Skip to content
OpenAdvisories

Product · Cisco

Cisco IOS XE Software

248 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.7
    CVE-2025-20352 Exploited Public exploit EPSS 41%

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Softw…

    Cisco Cisco IOS XE Software IOS Cisco IOS XE Catalyst SD-WAN iOS Network devices
    KEV Sep 29, 2025
  • High 8.6
    CVE-2024-20467 Public exploit

    A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.2
    CVE-2023-20273 Exploited Public exploit EPSS 93%

    A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject …

    Cisco Cisco IOS XE Software iOS Network devices
    KEV Oct 23, 2023
  • Critical 10.0
    CVE-2023-20198 Exploited Public exploit Scanner template EPSS 100%

    Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IO…

    Cisco Cisco IOS XE Software iOS Network devices
    KEV Oct 16, 2023
  • High 7.4
    CVE-2021-34767 Public exploit

    Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability

    A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 (L2) loop in a configured VLAN, resulting in a den…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 8.8
    CVE-2019-12624 Public exploit EPSS 18%

    Cisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected …

    Cisco Cisco IOS XE Software iOS Network devices
  • Medium 5.3
    CVE-2019-1759 Public exploit

    Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability

    A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface.…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.4
    CVE-2019-1749 Public exploit

    Cisco Aggregation Services Router 900 Route Switch Processor 3 OSPFv2 Denial of Service Vulnerability

    A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router (ASR) 900 Route Switch Processor 3 (RSP3) could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting i…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 8.8
    CVE-2017-6742 Exploited Public exploit EPSS 21%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IntelliShield Cisco IOS XE Software Universal Product iOS Network devices
    KEV Apr 19, 2023