Cisco Ios Xe Software 16.3.1
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:cisco_ios_xe_software_16.3.1:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Cisco Ios Xe Software 16.3.1 (0aed0def-de14-5b18-a293-b6cc94d9c698) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-3227 |
vulnerable | 2026-06-08 05:25:53.973507 |
Cisco IOx for IOS XE Software Privilege Escalation Vulnerability
CRITICAL (9.8)
A vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute Cisco IOx API commands without proper authorization. The vulnerability is due to incorrect handling of requests for authorization tokens. An attacker could exploit this vulnerability by using a crafted API call to request such a token. An exploit could allow the attacker to obtain an authorization token and execute any of the IOx API commands on an affected device.
Published: 2020-06-03T17:42:14.288Z
Updated: 2024-11-15T17:14:29.896Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.