n/a Cisco IOS XE
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
public exploit
0
EPSS ≥ 10%
by severity
3critical17high15medium0low
updated 2026-10-28
01
vulnerabilities (35)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2017-12319US | medium5.9OT critical | KEV |
| CVE-2017-12229US | critical9.8 | — |
| CVE-2018-0150US | critical9.8OT elevated | — |
| CVE-2018-0177US | high7.5 | — |
| CVE-2017-12226US | high8.8 | — |
| CVE-2017-12230US | high8.8OT elevated | — |
| CVE-2017-12236US | critical9.8 | — |
| CVE-2017-3858US | high8.8 | — |
| CVE-2018-0157US | high8.6 | — |
| CVE-2018-0170US | high7.5 | — |
| CVE-2017-3856US | high7.5 | — |
| CVE-2018-0164US | high8.6 | — |
| CVE-2018-0160US | medium6.3 | — |
| CVE-2018-0195US | high8.8 | — |
| CVE-2017-12272US | medium6.1 | — |
| CVE-2018-0196US | medium4.9 | — |
| CVE-2017-6664US | high7.5 | — |
| CVE-2018-0190US | medium6.1 | — |
| CVE-2018-0188US | medium6.1 | — |
| CVE-2018-0186US | medium6.1 | — |
| CVE-2017-12222US | medium6.5 | — |
| CVE-2018-0165US | high7.4 | — |
| CVE-2018-0194US | high7.8 | — |
| CVE-2018-0193US | high7.8 | — |
| CVE-2018-0185US | high7.8 | — |
| CVE-2018-0182US | high7.8 | — |
| CVE-2017-6606US | medium6.4 | — |
| CVE-2018-0176US | high7.8 | — |
| CVE-2018-0169US | high7.8 | — |
| CVE-2017-6796US | medium6.7 | — |
| CVE-2017-12239US | medium6.8OT elevated | — |
| CVE-2018-0184US | medium6.7 | — |
| CVE-2018-0183US | medium6.7 | — |
| CVE-2017-12289US | medium4.4 | — |
| CVE-2017-6795US | medium4.4 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')10 CVEs
- CWE-264CWE-2648 CVEs
- CWE-20Improper Input Validation6 CVEs
- CWE-399CWE-3994 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
- CWE-287Improper Authentication3 CVEs
- CWE-19CWE-192 CVEs
- CWE-798Use of Hard-coded Credentials2 CVEs
03
sources (1)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)35 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan