# Cisco IOS and IOS XE.

Every CVE that names Cisco IOS and IOS XE among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of service (DoS) condi…](https://agentprime.io/advisories/CVE-2018-0189.md)
  `CVE-2018-0189` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-399
- [Improper input validation in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2018-0174.md)
  `CVE-2018-0174` · CVE record: Cisco IOS and IOS XE · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-20
- [Improper input validation in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2018-0173.md)
  `CVE-2018-0173` · CVE record: Cisco IOS and IOS XE · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-20
- [Improper input validation in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2018-0172.md)
  `CVE-2018-0172` · CVE record: Cisco IOS and IOS XE · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-20
- [Improper input validation in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2018-0171.md)
  `CVE-2018-0171` · CVE record: Cisco IOS and IOS XE · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.99 · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-20
- [Improper input validation in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2018-0159.md)
  `CVE-2018-0159` · CVE record: Cisco IOS and IOS XE · CVSS 7.5 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-20
- [Improper input validation in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2018-0158.md)
  `CVE-2018-0158` · CVE record: Cisco IOS and IOS XE · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-20
- [A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a…](https://agentprime.io/advisories/CVE-2018-0156.md)
  `CVE-2018-0156` · CVE record: Cisco IOS and IOS XE · CVSS 7.5 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-399
- [A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated,…](https://agentprime.io/advisories/CVE-2018-0155.md)
  `CVE-2018-0155` · CVE record: Cisco IOS and IOS XE · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Mar 2018 · Tags: CWE-388
- [Buffer overflow in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2018-0151.md)
  `CVE-2018-0151` · CVE record: Cisco IOS and IOS XE · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.14 · Not analysed yet · Published 28 Mar 2018 · Tags: Memory corruption
- [Path traversal in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2018-0123.md)
  `CVE-2018-0123` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 8 Feb 2018 · Tags: Path traversal
- [Cross-site scripting in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2017-12304.md)
  `CVE-2017-12304` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 16 Nov 2017 · Tags: Cross-site scripting (XSS)
- [Improper input validation in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2017-12240.md)
  `CVE-2017-12240` · CVE record: Cisco IOS and IOS XE · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.14 · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-20
- [A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CP…](https://agentprime.io/advisories/CVE-2017-12237.md)
  `CVE-2017-12237` · CVE record: Cisco IOS and IOS XE · CVSS 7.5 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-399
- [Improper input validation in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2017-12228.md)
  `CVE-2017-12228` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 28 Sept 2017 · Tags: CWE-20
- [A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an…](https://agentprime.io/advisories/CVE-2017-6665.md)
  `CVE-2017-6665` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 7 Aug 2017
- [A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to…](https://agentprime.io/advisories/CVE-2017-6663.md)
  `CVE-2017-6663` · CVE record: Cisco IOS and IOS XE · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 7 Aug 2017
- [Buffer overflow in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2017-3863.md)
  `CVE-2017-3863` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: Memory corruption
- [Buffer overflow in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2017-3862.md)
  `CVE-2017-3862` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: Memory corruption
- [Buffer overflow in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2017-3861.md)
  `CVE-2017-3861` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: Memory corruption
- [Buffer overflow in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2017-3860.md)
  `CVE-2017-3860` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 20 Apr 2017 · Tags: Memory corruption
- [A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote attacker to cause a denial…](https://agentprime.io/advisories/CVE-2017-3864.md)
  `CVE-2017-3864` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 22 Mar 2017 · Tags: CWE-399
- [A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an unauthenticated, re…](https://agentprime.io/advisories/CVE-2017-3857.md)
  `CVE-2017-3857` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 22 Mar 2017 · Tags: CWE-399
- [Improper input validation in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2017-3850.md)
  `CVE-2017-3850` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 21 Mar 2017 · Tags: CWE-20
- [Improper input validation in Cisco IOS and IOS XE](https://agentprime.io/advisories/CVE-2017-3849.md)
  `CVE-2017-3849` · CVE record: Cisco IOS and IOS XE · No CVSS score · Not analysed yet · Published 21 Mar 2017 · Tags: CWE-20

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-ios-and-ios-xe>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-ios-and-ios-xe/>. Everything for agents: <https://agentprime.io/llms.txt>.