# Cisco IOS XE Software.

Every CVE that names Cisco IOS XE Software among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3359.md)
  `CVE-2020-3359` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3390.md)
  `CVE-2020-3390` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2020-3393.md)
  `CVE-2020-3393` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.0 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: Privilege escalation
- [Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2020-3396.md)
  `CVE-2020-3396` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: Broken access control
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3399.md)
  `CVE-2020-3399` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-126
- [Cisco IOS XE Software Web UI Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2020-3400.md)
  `CVE-2020-3400` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2020 · Tags: Broken access control
- [Cisco IOS XE Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2020-3403.md)
  `CVE-2020-3403` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: Command injection
- [Cisco IOS XE Software Consent Token Bypass Vulnerability](https://agentprime.io/advisories/CVE-2020-3404.md)
  `CVE-2020-3404` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: Broken access control
- [Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3407.md)
  `CVE-2020-3407` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: Memory corruption
- [Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3416.md)
  `CVE-2020-3416` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-749
- [Cisco IOS XE Software Arbitrary Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-3417.md)
  `CVE-2020-3417` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: Command injection
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Improper Access Control Vulnerability](https://agentprime.io/advisories/CVE-2020-3418.md)
  `CVE-2020-3418` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.7 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: Broken access control
- [Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3421.md)
  `CVE-2020-3421` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-754
- [Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3422.md)
  `CVE-2020-3422` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-371
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WLAN Local Profiling Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3428.md)
  `CVE-2020-3428` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3429.md)
  `CVE-2020-3429` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Software Arbitrary File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2020-3476.md)
  `CVE-2020-3476` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.4 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: Information disclosure
- [Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3480.md)
  `CVE-2020-3480` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-754
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3486.md)
  `CVE-2020-3486` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3487.md)
  `CVE-2020-3487` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3488.md)
  `CVE-2020-3488` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3489.md)
  `CVE-2020-3489` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3493.md)
  `CVE-2020-3493` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3494.md)
  `CVE-2020-3494` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3497.md)
  `CVE-2020-3497` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability](https://agentprime.io/advisories/CVE-2020-3503.md)
  `CVE-2020-3503` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.0 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: Broken access control
- [Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3508.md)
  `CVE-2020-3508` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2020 · Tags: Denial of service
- [Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3509.md)
  `CVE-2020-3509` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-388
- [Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3510.md)
  `CVE-2020-3510` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-388
- [Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3513.md)
  `CVE-2020-3513` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-749
- [Cisco IOS XE Software Web UI Improper Input Validation Vulnerability](https://agentprime.io/advisories/CVE-2020-3516.md)
  `CVE-2020-3516` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.3 Medium · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Software Common Open Policy Service Engine Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3526.md)
  `CVE-2020-3526` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco Catalyst 9200 Series Switches Jumbo Frame Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3527.md)
  `CVE-2020-3527` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2020 · Tags: CWE-20
- [Cisco IOS XE Software ISDN Data Leak Vulnerability](https://agentprime.io/advisories/CVE-2019-12664.md)
  `CVE-2019-12664` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.7 Medium · Not analysed yet · Published 25 Sept 2019 · Tags: Information disclosure
- [Cisco IOS XE Software TrustSec Protected Access Credential Provisioning Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-12663.md)
  `CVE-2019-12663` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 25 Sept 2019 · Tags: CWE-20
- [Cisco IOS XE Software Virtualization Manager CLI Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2019-12661.md)
  `CVE-2019-12661` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 25 Sept 2019 · Tags: Command injection
- [Cisco IOS XE Software Raw Socket Transport Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-12653.md)
  `CVE-2019-12653` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2019 · Tags: CWE-20
- [Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-12646.md)
  `CVE-2019-12646` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2019 · Tags: CWE-399
- [Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-12643.md)
  `CVE-2019-12643` · CVE record: Cisco Cisco IOS XE Software · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2019 · Tags: Authentication bypass
- [Cisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2019-12624.md)
  `CVE-2019-12624` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.18 · Not analysed yet · Published 21 Aug 2019 · Tags: Cross-site request forgery (CSRF)
- [Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2019-1904.md)
  `CVE-2019-1904` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.8 High · Not analysed yet · Published 21 Jun 2019 · Tags: Cross-site request forgery (CSRF)
- [Cisco IOS XE Software Web UI Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2019-1862.md)
  `CVE-2019-1862` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.2 High · Not analysed yet · Published 13 May 2019 · Tags: CWE-20
- [Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-1759.md)
  `CVE-2019-1759` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.3 Medium · Not analysed yet · Published 28 Mar 2019 · Tags: Broken access control
- [Cisco IOS XE Software Performance Routing Version 3 Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1760.md)
  `CVE-2019-1760` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 28 Mar 2019 · Tags: CWE-20
- [Cisco IOS XE Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1754.md)
  `CVE-2019-1754` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.8 High · Not analysed yet · Published 28 Mar 2019 · Tags: CWE-20
- [Cisco IOS XE Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2019-1755.md)
  `CVE-2019-1755` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.5 Medium · Not analysed yet · Published 28 Mar 2019 · Tags: CWE-20
- [Cisco IOS XE Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2019-1756.md)
  `CVE-2019-1756` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.2 High · Not analysed yet · Published 28 Mar 2019 · Tags: CWE-20
- [Cisco IOS XE Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1753.md)
  `CVE-2019-1753` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.8 High · Not analysed yet · Published 28 Mar 2019 · Tags: CWE-20
- [Cisco Aggregation Services Router 900 Route Switch Processor 3 OSPFv2 Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1749.md)
  `CVE-2019-1749` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 27 Mar 2019 · Tags: CWE-20
- [Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1750.md)
  `CVE-2019-1750` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 27 Mar 2019 · Tags: CWE-20
- [Cisco IOS XE Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2019-1745.md)
  `CVE-2019-1745` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.8 High · Not analysed yet · Published 27 Mar 2019 · Tags: Command injection
- [Cisco IOS XE Software Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-1742.md)
  `CVE-2019-1742` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2019 · Tags: CWE-16
- [Cisco IOS XE Software Arbitrary File Upload Vulnerability](https://agentprime.io/advisories/CVE-2019-1743.md)
  `CVE-2019-1743` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.8 High · Not analysed yet · Published 27 Mar 2019 · Tags: CWE-20
- [Cisco IOS XE Software Encrypted Traffic Analytics Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1741.md)
  `CVE-2019-1741` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2019 · Tags: CWE-20
- [Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability](https://agentprime.io/advisories/CVE-2018-15374.md)
  `CVE-2018-15374` · CVE record: Cisco Cisco IOS XE Software · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: Weak cryptography or TLS
- [Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2018-15372.md)
  `CVE-2018-15372` · CVE record: Cisco Cisco IOS XE Software · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: Broken access control
- [Cisco IOS XE Software Shell Access Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2018-15371.md)
  `CVE-2018-15371` · CVE record: Cisco Cisco IOS XE Software · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: Broken access control
- [Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability](https://agentprime.io/advisories/CVE-2018-15368.md)
  `CVE-2018-15368` · CVE record: Cisco Cisco IOS XE Software · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: CWE-20
- [Cisco IOS XE Software Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2018-0481.md)
  `CVE-2018-0481` · CVE record: Cisco Cisco IOS XE Software · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: Command injection
- [Cisco IOS XE Software Errdisable Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2018-0480.md)
  `CVE-2018-0480` · CVE record: Cisco Cisco IOS XE Software · No CVSS score · Not analysed yet · Published 5 Oct 2018 · Tags: Race condition

Newest: <https://agentprime.io/advisories/technology/cisco-ios-xe-software.md>
Older: <https://agentprime.io/advisories/technology/cisco-ios-xe-software.md?cursor=WyIyMDE4LTEwLTA1VDE0OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0wNDgwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-ios-xe-software&cursor=WyIyMDIxLTAzLTI0VDIwOjA1OjE1LjQ5MTAwMFoiLCJDVkUtMjAyMS0xNDMxIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-ios-xe-software/?cursor=WyIyMDIxLTAzLTI0VDIwOjA1OjE1LjQ5MTAwMFoiLCJDVkUtMjAyMS0xNDMxIl0>. Everything for agents: <https://agentprime.io/llms.txt>.