How many Cisco ios xe CVEs are in CISA KEV?

Yes — 28 of Cisco ios xe's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Cisco ios xe are affected?

3,919 distinct Cisco ios xe versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Cisco ios xe CVEs?

Cisco ios xe's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-399, CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

How many critical Cisco ios xe vulnerabilities are there?

Cisco ios xe has 28 critical and 340 high-severity CVEs.

What is the average severity of Cisco ios xe CVEs?

The average CVSS base score across Cisco ios xe's scored CVEs is 7.4.

Cisco ios xe Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Cisco ios xe has 549 published CVE records since 2009, of which 28 are in CISA's Known Exploited Vulnerabilities catalog and 35 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Cisco ios xe, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include 1000 integrated services router, 1000v, 1100, 1100 integrated services r, 1100 integrated services router, 1100 terminal services gateways.

Severity and exploitation

How the CVSS severity of Cisco ios xe's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical28

High340

Medium180

Low1

In CISA’s Known Exploited Vulnerabilities catalog

28 of Cisco ios xe's CVEs are confirmed exploited in the wild.

Public exploits

35 of Cisco ios xe's CVEs have a known public exploit available.

Frequently asked questions

Common questions about Cisco ios xe vulnerabilities.

How many CVEs does Cisco ios xe have?: Cisco ios xe has 549 published CVE records since 2009.
How many Cisco ios xe CVEs are in CISA KEV?: Yes — 28 of Cisco ios xe's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Cisco ios xe vulnerabilities?: Yes — 35 of Cisco ios xe's CVEs have a known public exploit.
Which versions of Cisco ios xe are affected?: 3,919 distinct Cisco ios xe versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Cisco ios xe CVEs?: Cisco ios xe's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-399, CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How many critical Cisco ios xe vulnerabilities are there?: Cisco ios xe has 28 critical and 340 high-severity CVEs.
What is the average severity of Cisco ios xe CVEs?: The average CVSS base score across Cisco ios xe's scored CVEs is 7.4.

Cisco ios xe Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Common weakness types

Disclosure activity by year

Other Cisco products

Frequently asked questions

References

Track Cisco ios xe vulnerabilities

Version ranges

Fixed in