GCVE - cpe:2.3:a:cisco:cisco_ios_xe_software_16.1.1:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:cisco_ios_xe_software_16.1.1:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Cisco Ios Xe Software 16.1.1 (`02d8b58b-d51e-533e-ae93-1278298a7b47`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-3475`	vulnerable	2026-06-08 05:25:55.465026	Cisco IOS XE Software Web Management Framework Vulnerabilities MEDIUM (4.3) Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2020-09-24T17:52:58.367Z Updated: 2024-11-13T17:57:42.435Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-webui-multi-vfTkk7yr	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3474`	vulnerable	2026-06-08 05:25:55.460934	Cisco IOS XE Software Web Management Framework Vulnerabilities MEDIUM (4.3) Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2020-09-24T17:53:03.262Z Updated: 2024-11-13T17:57:33.266Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-webui-multi-vfTkk7yr	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3425`	vulnerable	2026-06-08 05:25:55.253023	Cisco IOS XE Software Privilege Escalation Vulnerabilities HIGH (8.8) Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to the level of an Administrator user on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2020-09-24T18:01:18.802Z Updated: 2024-11-13T17:56:44.147Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-webui-priv-esc-K8zvEWM	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3219`	vulnerable	2026-06-08 05:25:53.843136	Cisco IOS XE Software Web UI Command Injection Vulnerability HIGH (8.8) A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with administrative privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of user-supplied input to the web UI. An attacker could exploit this vulnerability by submitting crafted input to the web UI. A successful exploit could allow an attacker to execute arbitrary commands with administrative privileges on an affected device. Published: 2020-06-03T17:41:35.883Z Updated: 2024-11-15T17:16:17.047Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-web-cmdinj2-fOnjk2LD	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3203`	vulnerable	2026-06-08 05:25:53.242086	Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability HIGH (8.6) A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain public key infrastructure (PKI) packets. An attacker could exploit this vulnerability by sending crafted Secure Sockets Layer (SSL) packets to an affected device. A successful exploit could cause an affected device to continuously consume memory, which could result in a memory allocation failure that leads to a crash and causes a DoS condition. Published: 2020-06-03T17:40:22.553Z Updated: 2024-11-15T17:19:40.948Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ewlc-dos-TkuPVmZN	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3141`	vulnerable	2026-06-08 05:25:50.811622	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12658`	vulnerable	2026-06-08 05:12:39.933444	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.