Advisories · Technology

Cisco IOS XE.

Every CVE that names Cisco IOS XE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-0194 CVE record

OS command injection in Cisco IOS XE
- Cisco IOS XE
- Command injection
Not analysed yet 2 Apr 2018
CVE-2018-0196 CVE record

Improper input validation in Cisco IOS XE
- Cisco IOS XE
- CWE-20
Not analysed yet 28 Mar 2018
CVE-2018-0195 CVE record

Improper authentication in Cisco IOS XE
- Cisco IOS XE
- Authentication bypass
Not analysed yet 28 Mar 2018
CVE-2018-0193 CVE record

OS command injection in Cisco IOS XE
- Cisco IOS XE
- Command injection
Not analysed yet 28 Mar 2018
CVE-2018-0190 CVE record

Cross-site scripting in Cisco IOS XE
- Cisco IOS XE
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2018
CVE-2018-0188 CVE record

Cross-site scripting in Cisco IOS XE
- Cisco IOS XE
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2018
CVE-2018-0186 CVE record

Cross-site scripting in Cisco IOS XE
- Cisco IOS XE
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2018
CVE-2018-0185 CVE record

OS command injection in Cisco IOS XE
- Cisco IOS XE
- Command injection
Not analysed yet 28 Mar 2018
CVE-2018-0184 CVE record

Cisco IOS XE: A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Mar 2018
CVE-2018-0183 CVE record

Cisco IOS XE: A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Mar 2018
CVE-2018-0182 CVE record

OS command injection in Cisco IOS XE
- Cisco IOS XE
- Command injection
Not analysed yet 28 Mar 2018
CVE-2018-0177 CVE record

Cisco IOS XE: A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software…
- Cisco IOS XE
- CWE-19
Not analysed yet 28 Mar 2018
CVE-2018-0176 CVE record

Cisco IOS XE: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Mar 2018
CVE-2018-0170 CVE record

Use after free in Cisco IOS XE
- Cisco IOS XE
- Memory corruption
Not analysed yet 28 Mar 2018
CVE-2018-0169 CVE record

Cisco IOS XE: Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Mar 2018
CVE-2018-0165 CVE record

Cisco IOS XE: A vulnerability in the Internet Group Management Protocol (IGMP) packet-processing…
- Cisco IOS XE
- CWE-399
Not analysed yet 28 Mar 2018
CVE-2018-0164 CVE record

Cisco IOS XE: A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could…
- Cisco IOS XE
- CWE-399
Not analysed yet 28 Mar 2018
CVE-2018-0160 CVE record

Double free in Cisco IOS XE
- Cisco IOS XE
- Memory corruption
Not analysed yet 28 Mar 2018
CVE-2018-0157 CVE record

Cisco IOS XE: A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an…
- Cisco IOS XE
- CWE-19
Not analysed yet 28 Mar 2018
CVE-2018-0150 CVE record

Hard-coded credentials in Cisco IOS XE
- Cisco IOS XE
- Hard-coded credentials
Not analysed yet 28 Mar 2018
CVE-2017-12319 CVE record

CVSS 5.9 MediumCritical · KEVKEV

Improper input validation in Cisco IOS XE
- Cisco IOS XE
- CWE-20
Not analysed yet 27 Mar 2018
CVE-2017-12289 CVE record

Information disclosure in Cisco IOS XE
- Cisco IOS XE
- Information disclosure
Not analysed yet 19 Oct 2017
CVE-2017-12272 CVE record

Cross-site scripting in Cisco IOS XE
- Cisco IOS XE
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2017
CVE-2017-12239 CVE record

Cisco IOS XE: A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Sept 2017
CVE-2017-12236 CVE record

Improper authentication in Cisco IOS XE
- Cisco IOS XE
- Authentication bypass
Not analysed yet 28 Sept 2017
CVE-2017-12230 CVE record

Cisco IOS XE: A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Sept 2017
CVE-2017-12229 CVE record

Improper authentication in Cisco IOS XE
- Cisco IOS XE
- Authentication bypass
Not analysed yet 28 Sept 2017
CVE-2017-12226 CVE record

Cisco IOS XE: A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for…
- Cisco IOS XE
- CWE-264
Not analysed yet 28 Sept 2017
CVE-2017-12222 CVE record

Cisco IOS XE: A vulnerability in the wireless controller manager of Cisco IOS XE could allow an…
- Cisco IOS XE
- CWE-399
Not analysed yet 28 Sept 2017
CVE-2017-6796 CVE record

OS command injection in Cisco IOS XE
- Cisco IOS XE
- Command injection
Not analysed yet 7 Sept 2017
CVE-2017-6795 CVE record

Improper input validation in Cisco IOS XE
- Cisco IOS XE
- CWE-20
Not analysed yet 7 Sept 2017
CVE-2017-6664 CVE record

Cisco IOS XE: A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow…
- Cisco IOS XE
Not analysed yet 7 Aug 2017
CVE-2017-6606 CVE record

Cisco IOS XE: A vulnerability in a startup script of Cisco IOS XE Software could allow an…
- Cisco IOS XE
Not analysed yet 7 Apr 2017
CVE-2017-3858 CVE record

Improper input validation in Cisco IOS XE
- Cisco IOS XE
- CWE-20
Not analysed yet 22 Mar 2017
CVE-2017-3856 CVE record

Cisco IOS XE: A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an…
- Cisco IOS XE
- CWE-399
Not analysed yet 22 Mar 2017