# Cisco IOS XE Software. Every CVE that names Cisco IOS XE Software among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20169.md) `CVE-2025-20169` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption - [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20175.md) `CVE-2025-20175` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption - [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20174.md) `CVE-2025-20174` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption - [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20170.md) `CVE-2025-20170` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption - [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20171.md) `CVE-2025-20171` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-248 - [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20176.md) `CVE-2025-20176` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-248 - [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20172.md) `CVE-2025-20172` · CVE record: Cisco IOS and 2 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-248 - [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20173.md) `CVE-2025-20173` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-248 - [Integer overflow in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2024-20434.md) `CVE-2024-20434` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.3 Medium · Not analysed yet · Published 25 Sept 2024 · Tags: Memory corruption - [Improper authorization in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20414.md) `CVE-2024-20414` · CVE record: Cisco IOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2024 · Tags: Broken access control - [Incorrect authorization in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2024-20510.md) `CVE-2024-20510` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.7 Medium · Not analysed yet · Published 25 Sept 2024 · Tags: Broken access control - [Cisco IOS XE Software: A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco…](https://agentprime.io/advisories/CVE-2024-20467.md) `CVE-2024-20467` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-399 - [Improper input validation in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2024-20464.md) `CVE-2024-20464` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-20 - [Cisco IOS XE Software: A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined…](https://agentprime.io/advisories/CVE-2024-20480.md) `CVE-2024-20480` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-783 - [Cross-site request forgery in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2024-20437.md) `CVE-2024-20437` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.1 High · Not analysed yet · Published 25 Sept 2024 · Tags: Cross-site request forgery (CSRF) - [NULL pointer dereference in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2024-20436.md) `CVE-2024-20436` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2024 · Tags: Memory corruption - [Stack-based buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20433.md) `CVE-2024-20433` · CVE record: Cisco IOS and 1 more · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2024 · Tags: Memory corruption - [Cisco IOS XE Software: A vulnerability in the process that classifies traffic that is going to the Unified…](https://agentprime.io/advisories/CVE-2024-20455.md) `CVE-2024-20455` · CVE record: Cisco Cisco IOS XE Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-371 - [Buffer overflow in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2024-20313.md) `CVE-2024-20313` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Apr 2024 · Tags: Memory corruption - [Path traversal in Cisco IOS XE Software and others](https://agentprime.io/advisories/CVE-2024-20310.md) `CVE-2024-20310` · CVE record: Cisco Cisco IOS XE Software and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 3 Apr 2024 · Tags: Path traversal - [Stack-based buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20307.md) `CVE-2024-20307` · CVE record: Cisco IOS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: Memory corruption - [Out-of-bounds write in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20308.md) `CVE-2024-20308` · CVE record: Cisco IOS and 1 more · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2024 · Tags: Memory corruption - [A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that…](https://agentprime.io/advisories/CVE-2024-20265.md) `CVE-2024-20265` · CVE record: Cisco Cisco IOS XE Software and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-501 - [Cisco IOS XE Software: A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2024-20309.md) `CVE-2024-20309` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.6 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-828 - [Incomplete cleanup in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2024-20303.md) `CVE-2024-20303` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-459 - [Cisco IOS XE Software: A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an…](https://agentprime.io/advisories/CVE-2024-20278.md) `CVE-2024-20278` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.5 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-184 - [Cisco IOS XE Software: A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE…](https://agentprime.io/advisories/CVE-2024-20306.md) `CVE-2024-20306` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.0 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-233 - [Cisco IOS XE Software: A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature…](https://agentprime.io/advisories/CVE-2024-20314.md) `CVE-2024-20314` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-783 - [NULL pointer dereference in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20312.md) `CVE-2024-20312` · CVE record: Cisco IOS and 1 more · CVSS 7.4 High · Not analysed yet · Published 27 Mar 2024 · Tags: Memory corruption - [Cisco IOS XE Software: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated…](https://agentprime.io/advisories/CVE-2024-20324.md) `CVE-2024-20324` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.5 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-274 - [Heap-based buffer overflow in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2024-20259.md) `CVE-2024-20259` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2024 · Tags: Memory corruption - [Uncontrolled recursion in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20311.md) `CVE-2024-20311` · CVE record: Cisco IOS and 1 more · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2024 · Tags: Denial of service - [Cisco IOS XE Software: A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could…](https://agentprime.io/advisories/CVE-2024-20316.md) `CVE-2024-20316` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.8 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-390 - [OS command injection in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2023-20273.md) `CVE-2023-20273` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.2 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.93 · Not analysed yet · Published 24 Oct 2023 · Tags: Command injection - [Cisco IOS XE Software: Cisco is providing an update for the ongoing investigation into observed exploitation of…](https://agentprime.io/advisories/CVE-2023-20198.md) `CVE-2023-20198` · CVE record: Cisco Cisco IOS XE Software · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 16 Oct 2023 · Tags: CWE-420 - [Files accessible to external parties in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2023-20235.md) `CVE-2023-20235` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.5 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Information disclosure - [Cisco IOS XE Software: A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2023-20202.md) `CVE-2023-20202` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.1 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Denial of service - [Out-of-bounds write in Cisco IOS and others](https://agentprime.io/advisories/CVE-2023-20109.md) `CVE-2023-20109` · CVE record: Cisco IOS and 1 more · CVSS 6.6 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 27 Sept 2023 · Tags: Memory corruption - [Improper authorization in Cisco IOS and others](https://agentprime.io/advisories/CVE-2023-20186.md) `CVE-2023-20186` · CVE record: Cisco IOS and 1 more · CVSS 8.0 High · Not analysed yet · Published 27 Sept 2023 · Tags: Broken access control - [Cisco IOS XE Software: A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2023-20227.md) `CVE-2023-20227` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-388 - [Cisco IOS XE Software: A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense…](https://agentprime.io/advisories/CVE-2023-20226.md) `CVE-2023-20226` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-456 - [Resource allocation without limits in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2023-20033.md) `CVE-2023-20033` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 27 Sept 2023 · Tags: Denial of service - [Cisco IOS XE Software: A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE…](https://agentprime.io/advisories/CVE-2023-20187.md) `CVE-2023-20187` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-823 - [OS command injection in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2023-20231.md) `CVE-2023-20231` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.8 High · Not analysed yet · Published 27 Sept 2023 · Tags: Command injection - [Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-20100.md) `CVE-2023-20100` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-694 - [Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-20072.md) `CVE-2023-20072` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-20 - [Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-20067.md) `CVE-2023-20067` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 23 Mar 2023 · Tags: Denial of service - [Cisco IOS XE Software Web UI Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2023-20066.md) `CVE-2023-20066` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.5 Medium · Not analysed yet · Published 23 Mar 2023 · Tags: Path traversal - [Improper access control in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2023-20065.md) `CVE-2023-20065` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.8 High · Not analysed yet · Published 23 Mar 2023 · Tags: Broken access control - [Cisco IOS XE SD-WAN Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2023-20035.md) `CVE-2023-20035` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.8 High · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-146 - [Cisco IOS XE Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2023-20029.md) `CVE-2023-20029` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.4 Medium · Not analysed yet · Published 23 Mar 2023 · Tags: Memory corruption - [Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-20027.md) `CVE-2023-20027` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 23 Mar 2023 · Tags: Memory corruption - [Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-20864.md) `CVE-2022-20864` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.6 Medium · Not analysed yet · Published 10 Oct 2022 · Tags: Information disclosure - [Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20837.md) `CVE-2022-20837` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 10 Oct 2022 · Tags: CWE-754 - [Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20915.md) `CVE-2022-20915` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 10 Oct 2022 · Tags: CWE-115 - [Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20870.md) `CVE-2022-20870` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 10 Oct 2022 · Tags: CWE-130 - [Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-20944.md) `CVE-2022-20944` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.1 Medium · Not analysed yet · Published 10 Oct 2022 · Tags: Weak cryptography or TLS - [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20856.md) `CVE-2022-20856` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2022 · Tags: CWE-664 - [Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2022-20855.md) `CVE-2022-20855` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.9 High · Not analysed yet · Published 30 Sept 2022 · Tags: Privilege escalation - [Cisco IOS XE Software Web UI Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2022-20851.md) `CVE-2022-20851` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.5 Medium · Not analysed yet · Published 30 Sept 2022 · Tags: Command injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .