Cisco Cisco IOS XE Catalyst SD-WAN

Name: Cisco Cisco IOS XE Catalyst SD-WAN
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical6high9medium0low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20352US	—OT critical	41.5% (99th)	KEV	no fix	2025-09-24	22 versions
CVE-2021-1435US	high7.2	8.54% (95th)	—	no fix	2021-03-24	—
CVE-2021-1433US	high8.1	2.34% (84th)	—	no fix	2021-03-24	—
CVE-2022-28199US	—	2.32% (83rd)	—	no fix	2022-09-01	—
CVE-2021-1431US	high7.5	1.66% (77th)	—	no fix	2021-03-24	—
CVE-2021-34697US	high8.6	1.33% (71st)	—	no fix	2021-09-23	—
CVE-2022-20655US	—	0.83% (57th)	—	no fix	2024-11-15	≤ N/A
CVE-2023-20100US	medium6.8	0.78% (56th)	—	no fix	2023-03-23	—
CVE-2024-20455US	high8.6	0.66% (52nd)	—	no fix	2024-09-25	15 versions
CVE-2021-1383US	medium6.7	0.59% (48th)	—	no fix	2021-03-24	—
CVE-2025-20334US	—	0.50% (43rd)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2024-20373US	—	0.50% (43rd)	—	no fix	2024-11-15	21 versions
CVE-2025-20315US	—	0.44% (38th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2026-20308US	—	0.44% (38th)	—	no fix	2026-08-05	—
CVE-2025-20160US	—	0.43% (37th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20151US	—	0.41% (35th)	—	no fix	2025-05-07	30 versions
CVE-2025-20327US	—	0.40% (34th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20312US	—	0.40% (34th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2021-1432US	high7.3	0.35% (29th)	—	no fix	2021-03-24	—
CVE-2025-20316US	—	0.34% (27th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20240US	—	0.34% (27th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2021-1436US	medium4.4	0.32% (25th)	—	no fix	2021-03-24	—
CVE-2025-20338US	medium6.7	0.30% (22nd)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2021-1454US	medium6.7	0.29% (21st)	—	no fix	2021-03-24	—
CVE-2021-1281US	medium6.7	0.29% (21st)	—	no fix	2021-03-24	—
CVE-2021-34724US	medium6.0	0.27% (18th)	—	no fix	2021-09-23	—
CVE-2021-34723US	medium6.7	0.24% (16th)	—	no fix	2021-09-23	—
CVE-2021-1434US	medium6.0	0.24% (15th)	—	no fix	2021-03-24	—
CVE-2025-20149US	—	0.24% (15th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20311US	—	0.20% (10th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20293US	—	0.20% (10th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20313US	—	0.18% (8th)	—	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-20314US	—	0.16% (5th)	—	no fix	2025-09-24	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-284Improper Access Control3 CVEs
CWE-1284Improper Validation of Specified Quantity in Input2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs

sources (3)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)17 CVEs
NLNCSC-NL (CSAF)14 CVEs
EUEU Vulnerability Database (ENISA)5 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan