Vulnerabilities of Cisco Cisco IOS XE Software
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-20314 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an… | 6.7 Medium | Sep 24, 2025 |
| CVE-2025-20316 | A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X… | 5.3 Medium | Sep 24, 2025 |
| CVE-2025-20293 | A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers… | 5.3 Medium | Sep 24, 2025 |
| CVE-2025-20338 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative… | 6.0 Medium | Sep 24, 2025 |
| CVE-2025-20240 | A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote… | 6.1 Medium | Sep 24, 2025 |
| CVE-2025-20149 | A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local… | 6.5 Medium | Sep 24, 2025 |
| CVE-2025-20313 | Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15… | 6.7 Medium | Sep 24, 2025 |
| CVE-2025-20311 | A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches… | 7.4 High | Sep 24, 2025 |
| CVE-2025-20312 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an… | 7.7 High | Sep 24, 2025 |
| CVE-2025-20352 | Exploited Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | 7.7 High | Sep 24, 2025 |
| CVE-2025-20160 | A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could… | 8.1 High | Sep 24, 2025 |
| CVE-2025-20315 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an… | 8.6 High | Sep 24, 2025 |
| CVE-2025-20334 | A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that… | 8.8 High | Sep 24, 2025 |
| CVE-2025-20239 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure… | 8.6 High | Aug 14, 2025 |
| CVE-2025-20225 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure… | 5.8 Medium | Aug 14, 2025 |
| CVE-2025-20195 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote… | 4.3 Medium | May 7, 2025 |
| CVE-2025-20194 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated,… | 5.4 Medium | May 7, 2025 |
| CVE-2025-20193 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated,… | 6.5 Medium | May 7, 2025 |
| CVE-2025-20201 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15… | 6.7 Medium | May 7, 2025 |
| CVE-2025-20200 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15… | 6.7 Medium | May 7, 2025 |
| CVE-2025-20199 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15… | 4.6 Medium | May 7, 2025 |
| CVE-2025-20198 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15… | 4.6 Medium | May 7, 2025 |
| CVE-2025-20197 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15… | 6.7 Medium | May 7, 2025 |
| CVE-2025-20221 | A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated,… | 5.3 Medium | May 7, 2025 |
| CVE-2025-20162 | A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote… | 8.6 High | May 7, 2025 |
Other Cisco products
Cisco Small Business RV Series Router Firmware 262
Cisco Identity Services Engine Software 199
Cisco Firepower Threat Defense Software 162
Cisco Adaptive Security Appliance (ASA) Software 161
Cisco Firepower Management Center 129
Cisco IOS XR Software 115
Cisco NX-OS Software 102
Cisco Secure Firewall Threat Defense (FTD) Software 81
Cisco Data Center Network Manager 74
Cisco Unified Communications Manager 62
Cisco SD-WAN vManage 61
Cisco SD-WAN Solution 55