VendorsCiscoios_xe16.12.2t

Vulnerabilities

Cisco IOS Xe 16.12.2t

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

58CVEs

CVE-2021-34770

Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability

Published 2021-09-23 · Analyzed

10.0EPSS 0.030

CVE-2021-1619

Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability

Published 2021-09-23 · Modified

9.8EPSS 0.018

CVE-2026-20272

Cisco IOS XE Software Security Hardening Release

Published 2026-08-05 · Modified

9.8EPSS 0.004

CVE-2021-1433

Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability

Published 2021-03-24 · Modified

9.3EPSS 0.023

CVE-2022-20719

Cisco IOx Application Hosting Environment Vulnerabilities

Published 2022-04-15 · Modified

9.0EPSS 0.027

CVE-2022-20718

Cisco IOx Application Hosting Environment Vulnerabilities

Published 2022-04-15 · Modified

9.0EPSS 0.024

CVE-2022-20723

Cisco IOx Application Hosting Environment Vulnerabilities

Published 2022-04-15 · Modified

9.0EPSS 0.021

CVE-2022-20693

Cisco IOS XE Software Web UI API Injection Vulnerability

Published 2022-04-15 · Modified

9.0EPSS 0.016

CVE-2022-20720

Cisco IOx Application Hosting Environment Vulnerabilities

Published 2022-04-15 · Modified

9.0EPSS 0.015

CVE-2026-20267

Cisco IOS XE Software Security Hardening Release

Published 2026-08-05 · Modified

9.0EPSS 0.003

CVE-2020-3425

Cisco IOS XE Software Privilege Escalation Vulnerabilities

Published 2020-09-24 · Modified

8.8EPSS 0.018

CVE-2022-20683

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability

Published 2022-04-15 · Modified

8.6EPSS 0.015

CVE-2021-1446

Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability

Published 2021-03-24 · Modified

8.6EPSS 0.015

CVE-2021-1373

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability

Published 2021-03-24 · Modified

8.6EPSS 0.015

CVE-2022-20682

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability

Published 2022-04-15 · Modified

8.6EPSS 0.013

CVE-2023-20027

Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability

Published 2023-03-23 · Modified

8.6EPSS 0.010

CVE-2026-20301

Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability

Published 2026-08-05 · Analyzed

8.6EPSS 0.003

CVE-2026-20268

Cisco IOS XE Software Security Hardening Release

Published 2026-08-05 · Modified

8.6EPSS 0.003

CVE-2026-20270

Cisco IOS XE Software Security Hardening Release

Published 2026-08-05 · Modified

8.6EPSS 0.003

CVE-2026-20269

Cisco IOS XE Software Security Hardening Release

Published 2026-08-05 · Modified

8.6EPSS 0.003

CVE-2026-20271

Cisco IOS XE Software Security Hardening Release

Published 2026-08-05 · Modified

8.6EPSS 0.003

CVE-2026-20273

Cisco IOS XE Software Security Hardening Release

Published 2026-08-05 · Analyzed

8.6EPSS 0.003

CVE-2021-1443

Cisco IOS XE Software Web UI OS Command Injection Vulnerability

Published 2021-03-24 · Modified

8.5EPSS 0.023

CVE-2021-1431

Cisco IOS XE SD-WAN Software vDaemon Denial of Service Vulnerability

Published 2021-03-24 · Modified

7.8EPSS 0.016

CVE-2021-1442

Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability

Published 2021-03-24 · Modified

7.8EPSS 0.002

CVE-2022-20681

Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Catalyst 9000 Family Wireless Controllers Privilege Escalation Vulnerability

Published 2022-04-15 · Modified

7.8EPSS 0.002

CVE-2021-1392

Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation Vulnerability

Published 2021-03-24 · Modified

7.8EPSS 0.002

CVE-2022-20679

Cisco IOS XE Software IPSec Denial of Service Vulnerability

Published 2022-04-15 · Modified

7.7EPSS 0.013

CVE-2022-20692

Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability

Published 2022-04-15 · Modified

7.7EPSS 0.011

CVE-2026-20124

Cisco IOS XE Software SNMP Denial of Service Vulnerability

Published 2026-08-05 · Analyzed

7.7EPSS 0.004

CVE-2022-20724

Cisco IOx Application Hosting Environment Vulnerabilities

Published 2022-04-15 · Modified

7.6EPSS 0.013

CVE-2021-34767

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability

Published 2021-09-23 · Analyzed

7.4EPSS 0.008

CVE-2021-1403

Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability

Published 2021-03-24 · Modified

7.4EPSS 0.006

CVE-2022-20684

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability

Published 2022-04-15 · Modified

7.4EPSS 0.005

CVE-2021-1352

Cisco IOS XE Software DECnet Phase IV/OSI Denial of Service Vulnerability

Published 2021-03-24 · Modified

7.4EPSS 0.004

CVE-2023-20067

Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability

Published 2023-03-23 · Modified

7.4EPSS 0.003

CVE-2021-1432

Cisco IOS XE SD-WAN Software Arbitrary Command Execution Vulnerability

Published 2021-03-24 · Modified

7.3EPSS 0.003

CVE-2022-20727

Cisco IOx Application Hosting Environment Vulnerabilities

Published 2022-04-15 · Modified

7.2EPSS 0.011

CVE-2021-1383

Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities

Published 2021-03-24 · Modified

7.2EPSS 0.006

CVE-2020-3417

Cisco IOS XE Software Arbitrary Code Execution Vulnerability

Published 2020-09-24 · Modified

7.2EPSS 0.004

Cisco IOS Xe 16.12.2t

Security check