Class familyCisco IOS XE Web UI
Cisco IOS XE OS command injection flaws, 2019–2025
7 Cisco IOS XE Web UI CVEs with CWE-78 weaknesses, 27 Mar 2019 to 7 May 2025. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2019’19
1 2020’20
1 2021’21
2022’22
2 2023’23
2024’24
2 2025’25
In CISA KEVNot in KEV
20191 CVE
20201 CVE
20211 CVE
20232 CVEs, 1 in KEV
20252 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2019-1745 | 27 Mar 2019 | Cisco IOS XE Software Command Injection Vulnerability | Grouped by weakness | 13.9 |
| CVE-2020-3403 | 24 Sep 2020 | Cisco IOS XE Software Command Injection Vulnerability | Grouped by weakness | 11.0 |
| CVE-2021-1529 | 21 Oct 2021 | Cisco IOS XE SD-WAN Software Command Injection Vulnerability | Grouped by weakness | 10.2 |
| CVE-2023-20231 | 27 Sep 2023 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an… | Grouped by weakness | 18.7 |
| CVE-2023-20273KEV | 25 Oct 2023 | Cisco IOS XE Web UI Command Injection Vulnerability | Grouped by weakness | 74.1 |
| CVE-2025-20193 | 7 May 2025 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated… | Grouped by weakness | 12.3 |
| CVE-2025-20194 | 7 May 2025 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated… | Grouped by weakness | 9.0 |