Sploitus

75 exploited vulnerabilities in Cisco Ios Xe

Showing 1–50 of 75, highest-scoring first

Vendors
Cisco, Alt Linux, Centos, Fortinet, Freebsd, Huawei
With known exploits
75
Affected Cisco Ios Xe versions
= 17.11.1, 17.11.99sw, 17.12.1, 17.12.2, 17.12.3, 17.13.1, 17.14.1, 3.11.xe, 3.9e, 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.4, 16.3.5, 16.3.5b, 16.3.6, 16.3.7, 16.3.8, 16.3.9, 16.3.10, 16.3.11, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.2, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.6.6, 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.6.10, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 3.17, 16.11.1, 16.11.1a, 16.11.1b, 16.11.1c, 16.11.1s, 16.11.2, 16.12.1, 16.12.1a, 16.12.1c, 16.12.1s, 16.12.1t, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.1z1, 16.12.1za, 16.12.2, 16.12.2a, 16.12.2s, 16.12.2t, 16.12.3, 16.12.3a, 16.12.3s, 16.12.4, 16.12.4a, 16.12.5, 17.1.1, 17.1.1a, 17.1.1s, 16.9.7, 17.3.3, 17.4.2, 17.5.0, 16.1.1, 16.1.2, 16.1.3, 16.2.1, 16.2.2, 3.18s
Affected Rockwellautomation Allen-bradley Stratix 5200 Firmware versions
< 17.12.02
Affected Cisco Ios versions
= 15.2\(5\)e, 15.1\(3\)svs, 12.4, 15.6, 15.8\(3\)m2a, 15.8\(3\)m3, 15.8\(3\)m4, 15.8\(3\)m5, 15.8\(3\)m6, 15.9\(3\)m, 15.9\(3\)m1, 15.9\(3\)m2, 15.9\(3\)m2a, 15.9\(3\)m3, 15.2\(5\)e1, 15.2\(5\)e2c, 15.2\(6\)e0a, 15.2\(6\)e1, 15.2\(6\)e2a, 15.2\(7\)e, 15.2\(7\)e0b, 15.2\(7\)e0s, 15.6\(1\)t1, 15.6\(1\)t2, 15.6\(1\)t3, 15.6\(2\)t, 15.6\(2\)t0a, 15.6\(2\)t1, 15.6\(2\)t2, 15.6\(2\)t3, 15.6\(3\)m, 15.6\(3\)m0a, 15.6\(3\)m1, 15.6\(3\)m1a, 15.6\(3\)m1b, 15.6\(3\)m2, 15.6\(3\)m2a, 15.6\(3\)m3, 15.6\(3\)m3a, 15.6\(3\)m4, 15.6\(3\)m5, 15.6\(3\)m6, 15.6\(3\)m6a, 15.6\(3\)m6b, 15.6\(3\)m7, 15.6\(3\)m8, 15.6\(3\)m9, 15.7\(3\)m, 15.7\(3\)m0a, 15.7\(3\)m1, 15.7\(3\)m2, 15.7\(3\)m3
Affected Hp Icewall Mcrp versions
= 3.0
Affected Hp Icewall Sso versions
= 10.0
Affected Hp Icewall Sso Agent Option versions
= 10.0
Affected Gnu Glibc versions
< 2.18
Affected Gnu Bash versions
= 1.14.0, 1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.14.5, 1.14.6, 1.14.7, 2.0, 2.01, 2.01.1, 2.02, 2.02.1, 2.03, 2.04, 2.05, 3.0, 3.0.16, 3.1, 3.2, 3.2.48, 4.0, 4.1, 4.2, 4.3

Vulnerabilities with exploits

Highest CVSS first — 22 of these already have exploit code on Sploitus

CVE-2025-20188
CVSS 10.0 CRITICAL 2025-05-07FIX AVAILABLE
CVE-2023-20198 27 exploits
CVSS 10.0 CRITICAL 2023-10-16
Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_FirmwareExploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware
CVE-2019-12624 2 exploits
CVSS 10.0 HIGH 2019-08-21
Cisco Wireless Controller 3.6.10E - Cross-Site Request ForgeryCisco Wireless Controller 3.6.10E - Cross-Site Request Forgery
CVE-2018-0171 3 exploits
CVSS 10.0 CRITICAL 2018-03-28
Exploit for Improper Input Validation in Cisco IosCisco Smart Install - Crash (PoC)
CVE-2017-3881 12 exploits
CVSS 10.0 CRITICAL 2017-03-17
Cisco IOS Telnet Denial of ServiceCisco IOS Telnet Denial of Service
CVE-2016-2177 2 exploits
CVSS 10.0 CRITICAL 2016-06-19FIX AVAILABLE
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middlearch-audit - An utility like pkg-audit for Arch Linux
CVE-2015-0235 28 exploits
CVSS 10.0 HIGH 2012-02-17FIX AVAILABLE
📄 Qualys Security Advisory - Exim 21Nails Advisory📄 Qualys Security Advisory - GHOST glibc gethostbyname Buffer Overflow
CVE-2014-7186 13 exploits
CVSS 10.0 HIGH 1970-01-01FIX AVAILABLE
Exploit for OS Command Injection in Gnu BashShellShockHunter - It's A Simple Tool For Test Vulnerability Shellshock
CVE-2014-7187 12 exploits
CVSS 10.0 HIGH 1970-01-01FIX AVAILABLE
Exploit for OS Command Injection in Gnu BashShellShockHunter - It's A Simple Tool For Test Vulnerability Shellshock
CVE-2014-6271 144 exploits
CVSS 10.0 CRITICAL 1970-01-01FIX AVAILABLE
Exploit for OS Command Injection in Gnu BashExploit for OS Command Injection in Gnu Bash
CVE-2014-7169 31 exploits
CVSS 10.0 CRITICAL 1970-01-01FIX AVAILABLE
Exploit for OS Command Injection in Gnu BashExploit for OS Command Injection in Gnu Bash
CVE-2014-6278 34 exploits
CVSS 10.0 HIGH 2014-09-24
Exploit for OS Command Injection in Gnu BashExploit for OS Command Injection in Gnu Bash
CVE-2014-6277 16 exploits
CVSS 10.0 HIGH 2014-09-24
Exploit for OS Command Injection in Gnu BashShellShockHunter - It's A Simple Tool For Test Vulnerability Shellshock
CVE-2015-7705
CVSS 9.8 CRITICAL 2015-10-21FIX AVAILABLE
CVE-2015-7853
CVSS 9.8 CRITICAL 2015-10-21FIX AVAILABLE
CVE-2015-7871 2 exploits
CVSS 9.8 CRITICAL 2014-12-24FIX AVAILABLE
NTP NAK To The FutureNTP "NAK to the Future"
CVE-2015-7547 18 exploits
CVSS 9.3 HIGH 2012-02-17FIX AVAILABLE
Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor VulnerabilityNexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor
CVE-2022-20719
CVSS 9.0 HIGH 2022-04-13
CVE-2022-20723
CVSS 9.0 HIGH 2022-04-13
CVE-2022-20718
CVSS 9.0 HIGH 2022-04-13
CVE-2017-6736 7 exploits
CVSS 9.0 HIGH 2017-06-29FIX AVAILABLE
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco IosExploit for Observable Discrepancy in Intel Atom_C
CVE-2015-7854
CVSS 8.8 HIGH 2015-10-21FIX AVAILABLE
CVE-2015-7849
CVSS 8.8 HIGH 2015-10-21
CVE-2021-1385
CVSS 8.5 HIGH 2021-03-24
CVE-2021-1384
CVSS 8.5 HIGH 2021-03-24
CVE-2023-20273 11 exploits
CVSS 8.3 HIGH 2023-10-16
Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_FirmwareCisco IOX XE Unauthenticated OS Command Execution
CVE-2017-3731 1 exploit
CVSS 7.8 HIGH 2017-01-26FIX AVAILABLE
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle
CVE-2017-3730 4 exploits
CVSS 7.8 HIGH 2017-01-26FIX AVAILABLE
OpenSSL 1.1.0 - Remote Client Denial of Service ExploitOpenSSL 1.1.0 Remote Client Denial Of Service
CVE-2015-7701
CVSS 7.8 HIGH 2015-10-21FIX AVAILABLE
CVE-2015-7974
CVSS 7.7 HIGH 2016-01-26FIX AVAILABLE
CVE-2022-20724
CVSS 7.6 HIGH 2022-04-13
CVE-2016-6415 7 exploits
CVSS 7.5 HIGH 2016-09-16FIX AVAILABLE
Cisco IKE Information DisclosureExploit for Exposure of Sensitive Information to an Unauthorized Actor in Cisco Ios
CVE-2016-2183 9 exploits
CVSS 7.5 HIGH 2016-08-31
CATSploit - An Automated Penetration Testing Tool Using Cyber Attack Techniques ScoringExploit for Exposure of Sensitive Information to an Unauthorized Actor in Redhat Jboss_Enterprise_Application_Platform
CVE-2015-7979
CVSS 7.5 HIGH 2015-12-31FIX AVAILABLE
CVE-2015-7848
CVSS 7.5 HIGH 2015-10-21
CVE-2015-7704
CVSS 7.5 HIGH 2015-10-21FIX AVAILABLE
CVE-2015-7703
CVSS 7.5 HIGH 2015-10-21FIX AVAILABLE
CVE-2015-7692
CVSS 7.5 HIGH 2015-10-21FIX AVAILABLE
CVE-2015-7691
CVSS 7.5 HIGH 2015-10-21FIX AVAILABLE
CVE-2014-8176
CVSS 7.5 HIGH 2015-06-11FIX AVAILABLE
CVE-2015-1789
CVSS 7.5 HIGH 2014-10-24FIX AVAILABLE
CVE-2015-0293 1 exploit
CVSS 7.5 HIGH 2014-10-24
Git-Vuln-Finder - Finding Potential Software Vulnerabilities From Git Commit Messages
CVE-2015-0292
CVSS 7.5 HIGH 2014-10-24FIX AVAILABLE
CVE-2015-0289
CVSS 7.5 HIGH 2014-10-24FIX AVAILABLE
CVE-2015-0288
CVSS 7.5 HIGH 2014-10-24FIX AVAILABLE
CVE-2015-0287
CVSS 7.5 HIGH 2014-10-24FIX AVAILABLE
CVE-2015-0209
CVSS 7.5 HIGH 2014-10-24
CVE-2021-1382
CVSS 7.2 HIGH 2021-03-24FIX AVAILABLE
CVE-2021-1383
CVSS 7.2 HIGH 2021-03-24
CVE-2016-6306 2 exploits
CVSS 7.1 HIGH 2016-09-21FIX AVAILABLE
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middlearch-audit - An utility like pkg-audit for Arch Linux