# Cisco IOS XE Software.

Every CVE that names Cisco IOS XE Software among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20848.md)
  `CVE-2022-20848` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2022 · Tags: CWE-399
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20847.md)
  `CVE-2022-20847` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2022 · Tags: CWE-399
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-20810.md)
  `CVE-2022-20810` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2022 · Tags: CWE-202
- [Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2022-20676.md)
  `CVE-2022-20676` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.1 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Privilege escalation
- [Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20678.md)
  `CVE-2022-20678` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-413
- [Cisco IOS XE Software IPSec Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20679.md)
  `CVE-2022-20679` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-20
- [Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Catalyst 9000 Family Wireless Controllers Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2022-20681.md)
  `CVE-2022-20681` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.8 High · Not analysed yet · Published 15 Apr 2022 · Tags: Privilege escalation
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20682.md)
  `CVE-2022-20682` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-690
- [Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20683.md)
  `CVE-2022-20683` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2022 · Tags: Memory corruption
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20684.md)
  `CVE-2022-20684` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 15 Apr 2022 · Tags: Memory corruption
- [Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20692.md)
  `CVE-2022-20692` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.7 High · Not analysed yet · Published 15 Apr 2022 · Tags: Denial of service
- [Cisco IOS XE Software Web UI API Injection Vulnerability](https://agentprime.io/advisories/CVE-2022-20693.md)
  `CVE-2022-20693` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.7 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Other injection
- [Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20694.md)
  `CVE-2022-20694` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Denial of service
- [Cisco IOS XE Software Interface Queue Wedge Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1621.md)
  `CVE-2021-1621` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-399
- [Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1619.md)
  `CVE-2021-1619` · CVE record: Cisco Cisco IOS XE Software · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2021 · Tags: Memory corruption
- [Cisco IOS XE Software H.323 Application Level Gateway Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1616.md)
  `CVE-2021-1616` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.7 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-693
- [Cisco Embedded Wireless Controller Software for Catalyst Access Points Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1615.md)
  `CVE-2021-1615` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-410
- [Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers EoGRE Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1611.md)
  `CVE-2021-1611` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-399
- [Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1565.md)
  `CVE-2021-1565` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2021 · Tags: Memory corruption
- [Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-34770.md)
  `CVE-2021-34770` · CVE record: Cisco Cisco IOS XE Software · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2021 · Tags: Memory corruption
- [Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34769.md)
  `CVE-2021-34769` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2021 · Tags: Memory corruption
- [Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34768.md)
  `CVE-2021-34768` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2021 · Tags: Memory corruption
- [Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-34767.md)
  `CVE-2021-34767` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-670
- [Cisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2021-34723.md)
  `CVE-2021-34723` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: Information disclosure
- [Cisco IOS XE Software Protection Against Distributed Denial of Service Attacks Feature Vulnerability](https://agentprime.io/advisories/CVE-2021-34697.md)
  `CVE-2021-34697` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.8 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-665
- [Cisco ASR 900 and ASR 920 Series Aggregation Services Routers Access Control List Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-34696.md)
  `CVE-2021-34696` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.8 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: Broken access control
- [Cisco IOS XE Software Zone-Based Policy Firewall ICMP and UDP Inspection Vulnerability](https://agentprime.io/advisories/CVE-2021-1625.md)
  `CVE-2021-1625` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.8 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: Broken access control
- [Cisco IOS XE Software Rate Limiting Network Address Translation Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1624.md)
  `CVE-2021-1624` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-399
- [Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Simple Network Management Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1623.md)
  `CVE-2021-1623` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.7 High · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-399
- [Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1622.md)
  `CVE-2021-1622` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2021 · Tags: Denial of service
- [Cisco IOS XE Software Active Debug Code Vulnerability](https://agentprime.io/advisories/CVE-2021-1381.md)
  `CVE-2021-1381` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.1 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-489
- [Cisco IOS XE Software Web UI Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1220.md)
  `CVE-2021-1220` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.3 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-20
- [Cisco IOS XE SD-WAN Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1281.md)
  `CVE-2021-1281` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.1 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-399
- [Cisco IOS XE Software DECnet Phase IV/OSI Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1352.md)
  `CVE-2021-1352` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-823
- [Cisco IOS XE Software Web UI Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1356.md)
  `CVE-2021-1356` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.3 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-20
- [Cisco IOS XE SD-WAN Software Console Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1371.md)
  `CVE-2021-1371` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.6 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Privilege escalation
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1373.md)
  `CVE-2021-1373` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-126
- [Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2021-1374.md)
  `CVE-2021-1374` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.8 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Cross-site scripting (XSS)
- [Cisco IOS XE Software Fast Reload Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1375.md)
  `CVE-2021-1375` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Weak cryptography or TLS
- [Cisco IOS XE Software Fast Reload Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1376.md)
  `CVE-2021-1376` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Weak cryptography or TLS
- [Cisco IOS XE SD-WAN Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1382.md)
  `CVE-2021-1382` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.0 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Command injection
- [Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1383.md)
  `CVE-2021-1383` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.0 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-20
- [Cisco IOx for IOS XE Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1384.md)
  `CVE-2021-1384` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.5 Medium · EPSS 0.35 · Not analysed yet · Published 24 Mar 2021 · Tags: Command injection
- [Cisco IOS XE Software Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1390.md)
  `CVE-2021-1390` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.1 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-123
- [Cisco IOS XE Software for Network Convergence System 520 Routers Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1394.md)
  `CVE-2021-1394` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.3 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-399
- [Cisco IOS XE Software Arbitrary Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-1398.md)
  `CVE-2021-1398` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-489
- [Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2021-1403.md)
  `CVE-2021-1403` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-345
- [Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1454.md)
  `CVE-2021-1454` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.0 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-20
- [Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-1453.md)
  `CVE-2021-1453` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Weak cryptography or TLS
- [Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-1451.md)
  `CVE-2021-1451` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.1 High · Not analysed yet · Published 24 Mar 2021 · Tags: Memory corruption
- [Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1446.md)
  `CVE-2021-1446` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-754
- [Cisco IOS XE Software Web UI OS Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1443.md)
  `CVE-2021-1443` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.5 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Command injection
- [Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-1441.md)
  `CVE-2021-1441` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Command injection
- [Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1442.md)
  `CVE-2021-1442` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.0 High · Not analysed yet · Published 24 Mar 2021 · Tags: Information disclosure
- [Cisco IOS XE SD-WAN Software Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2021-1436.md)
  `CVE-2021-1436` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.4 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Path traversal
- [Cisco IOS XE Software Web UI Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1435.md)
  `CVE-2021-1435` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.6 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Path traversal
- [Cisco IOS XE SD-WAN Software Arbitrary File Corruption Vulnerability](https://agentprime.io/advisories/CVE-2021-1434.md)
  `CVE-2021-1434` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.4 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Information disclosure
- [Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability](https://agentprime.io/advisories/CVE-2021-1433.md)
  `CVE-2021-1433` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.1 High · Not analysed yet · Published 24 Mar 2021 · Tags: Memory corruption
- [Cisco IOS XE SD-WAN Software Arbitrary Command Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-1432.md)
  `CVE-2021-1432` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.3 High · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-20
- [Cisco IOS XE SD-WAN Software vDaemon Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1431.md)
  `CVE-2021-1431` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-20

Newest: <https://agentprime.io/advisories/technology/cisco-ios-xe-software.md>
Older: <https://agentprime.io/advisories/technology/cisco-ios-xe-software.md?cursor=WyIyMDIxLTAzLTI0VDIwOjA1OjE1LjQ5MTAwMFoiLCJDVkUtMjAyMS0xNDMxIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-ios-xe-software&cursor=WyIyMDIyLTA5LTMwVDE4OjQ2OjEwLjI5NDAwMFoiLCJDVkUtMjAyMi0yMDg1MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-ios-xe-software/?cursor=WyIyMDIyLTA5LTMwVDE4OjQ2OjEwLjI5NDAwMFoiLCJDVkUtMjAyMi0yMDg1MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.