Class familyCisco · IOS XE Software
Cisco IOS XE input validation flaws, 2018–2023
14 IOS XE Software CVEs with CWE-20 weaknesses, 27 Mar 2018 to 23 Mar 2023. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
2 2018’18
2 2019’19
8 2020’20
1 2021’21
2022’22
1 2023’23
In CISA KEVNot in KEV
20182 CVEs, 2 in KEV
20192 CVEs
20208 CVEs
20211 CVE
20231 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2017-12319KEV | 27 Mar 2018 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | Grouped by weakness | 60.6 |
| CVE-2018-0174KEV | 28 Mar 2018 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | Grouped by weakness | 62.9 |
| CVE-2019-1741 | 27 Mar 2019 | Cisco IOS XE Software Encrypted Traffic Analytics Denial of Service Vulnerability | Grouped by weakness | 23.3 |
| CVE-2019-1760 | 28 Mar 2019 | Cisco IOS XE Software Performance Routing Version 3 Denial of Service Vulnerability | Grouped by weakness | 21.2 |
| CVE-2020-3359 | 24 Sep 2020 | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability | Grouped by weakness | 20.9 |
| CVE-2020-3486 | 24 Sep 2020 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities | Grouped by weakness | 14.6 |
| CVE-2020-3487 | 24 Sep 2020 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities | Grouped by weakness | 13.1 |
| CVE-2020-3488 | 24 Sep 2020 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities | Grouped by weakness | 13.8 |
| CVE-2020-3489 | 24 Sep 2020 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities | Grouped by weakness | 13.8 |
| CVE-2020-3493 | 24 Sep 2020 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities | Grouped by weakness | 13.8 |
| CVE-2020-3494 | 24 Sep 2020 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities | Grouped by weakness | 12.7 |
| CVE-2020-3497 | 24 Sep 2020 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities | Grouped by weakness | 13.8 |
| CVE-2021-1431 | 24 Mar 2021 | Cisco IOS XE SD-WAN Software vDaemon Denial of Service Vulnerability | Grouped by weakness | 20.6 |
| CVE-2023-20072 | 23 Mar 2023 | Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability | Grouped by weakness | 18.5 |