cisco ios xe

Name: cisco ios xe
Brand: cisco

productUS

cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

16critical315high179medium1low

updated 2026-10-28

vulnerabilities (560)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	17.15.1	2023-10-10	< 17.15.1
CVE-2023-20198US	critical10.0OT critical	99.6% (100th)	KEV	17.6.6a	2023-10-16	4 versions
CVE-2017-3881US	critical9.8OT critical	99.0% (100th)	KEV	no fix	2017-03-17	3.2sg → 3.9e
CVE-2023-20273US	high7.2OT critical	92.9% (100th)	KEV	17.9.4a	2023-10-25	189 versions
CVE-2016-6415US	high7.5OT critical	87.7% (100th)	KEV	no fix	2016-09-19	≤ 3.18s
CVE-2017-6736US	high8.8OT critical	70.4% (99th)	KEV	no fix	2017-07-17	2.2.0 → 3.17
CVE-2025-20352US	—OT critical	41.5% (99th)	KEV	no fix	2025-09-24	349 versions
CVE-2017-6742US	high8.8OT critical	21.4% (98th)	KEV	no fix	2017-07-17	2.2.0 → 3.17
CVE-2017-6737US	high8.8OT critical	45.2% (99th)	KEV	no fix	2017-07-17	2.2.0 → 3.17.0
CVE-2018-0151US	critical9.8OT critical	14.2% (97th)	KEV	no fix	2018-03-28	2 versions
CVE-2017-6740US	high8.8OT critical	11.1% (96th)	KEV	no fix	2017-07-17	2.2.0 → 3.17
CVE-2017-6743US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	2.2.0 → 3.17
CVE-2017-6739US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	2.2.0 → 3.17.0
CVE-2017-6738US	high8.8OT critical	10.9% (96th)	KEV	no fix	2017-07-17	2.2.0 → 3.17.0
CVE-2018-0156US	high7.5OT critical	9.36% (95th)	KEV	no fix	2018-03-28	2 versions
CVE-2018-0172US	high8.6OT critical	7.82% (95th)	KEV	no fix	2018-03-28	—
CVE-2018-0155US	high8.6OT critical	7.74% (95th)	KEV	no fix	2018-03-28	= 3.6(2)e
CVE-2018-0174US	high8.6OT critical	7.61% (95th)	KEV	no fix	2018-03-28	3 versions
CVE-2018-0173US	high8.6OT critical	7.61% (95th)	KEV	no fix	2018-03-28	3 versions
CVE-2018-0158US	high8.6OT critical	7.19% (94th)	KEV	no fix	2018-03-28	10 versions
CVE-2017-12237US	high7.5OT critical	7.07% (94th)	KEV	no fix	2017-09-29	3.5.0e → 16.5
CVE-2018-0159US	high7.5OT critical	6.87% (94th)	KEV	no fix	2018-03-28	= 15.3(3)s
CVE-2017-6627US	high7.5OT critical	6.16% (93rd)	KEV	no fix	2017-09-07	36 versions
CVE-2017-12319US	medium5.9OT critical	5.24% (93rd)	KEV	16.3	2018-03-27	< 16.3
CVE-2018-0175US	high8.0OT critical	3.48% (89th)	KEV	no fix	2018-03-28	4 versions
CVE-2018-0167US	high8.8OT critical	3.35% (89th)	KEV	no fix	2018-03-28	4 versions
CVE-2023-20109US	medium6.6OT critical	2.48% (85th)	KEV	no fix	2023-09-27	364 versions
CVE-2017-6663US	medium6.5OT critical	2.12% (82nd)	KEV	no fix	2017-08-07	69 versions
CVE-2019-12624US	high8.8	18.2% (97th)	Exploit	no fix	2019-08-21	3.0.xe → 3.11.xe
CVE-2019-1759US	medium5.3	4.40% (91st)	Exploit	no fix	2019-03-28	45 versions
CVE-2024-20467US	high8.6	0.98% (62nd)	Exploit	no fix	2024-09-25	3 versions
CVE-2021-34767US	high7.4	0.78% (56th)	Exploit	no fix	2021-09-23	93 versions
CVE-2019-1749US	high7.4	0.60% (49th)	Exploit	no fix	2019-03-28	48 versions
CVE-2021-1384US	high7.2	35.4% (98th)	—	16.9.7	2021-03-24	5 versions
CVE-2025-20188US	—OT elevated	27.5% (98th)	—	no fix	2025-05-07	7 versions
CVE-2019-12650US	high8.8	26.1% (98th)	—	no fix	2019-09-25	2 versions
CVE-2018-0472US	high8.6	16.2% (97th)	—	no fix	2018-10-05	2 versions
CVE-2018-0476US	medium5.9	13.7% (96th)	—	no fix	2018-10-05	3 versions
CVE-2021-1435US	high7.2	8.54% (95th)	—	no fix	2021-03-24	36 versions
CVE-2015-6360US	high7.5	8.28% (95th)	—	no fix	2016-04-21	20 versions
CVE-2018-0315US	critical9.8	7.62% (95th)	—	no fix	2018-06-07	2 versions
CVE-2025-20363US	—	6.92% (94th)	—	no fix	2025-09-25	3.2.0sg → 17.17.1
CVE-2017-6741US	high8.8	6.65% (94th)	—	no fix	2017-07-17	112 versions
CVE-2019-1862US	high7.2	5.42% (93rd)	—	no fix	2019-05-13	= 16.3.7
CVE-2020-3229US	high8.8OT elevated	5.33% (93rd)	—	no fix	2020-06-03	83 versions
CVE-2019-12643US	critical10.0	5.32% (93rd)	—	no fix	2019-08-28	2 versions
CVE-2017-12229US	critical9.8	5.17% (92nd)	—	no fix	2017-09-29	17 versions
CVE-2020-3218US	high7.2	4.93% (92nd)	—	no fix	2020-06-03	58 versions
CVE-2016-6441US	critical9.8	4.90% (92nd)	—	no fix	2016-11-03	7 versions
CVE-2016-6382US	high7.5	4.90% (92nd)	—	no fix	2016-10-05	62 versions

showing 50 of 560

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation163 CVEs
CWE-399CWE-39981 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')42 CVEs
CWE-400Uncontrolled Resource Consumption38 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer31 CVEs
CWE-264CWE-26421 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')17 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')16 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE560 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan