Vulnerabilities > Cisco > IOS XE > 16.12.2r

DATE CVE VULNERABILITY TITLE RISK
2021-01-13 CVE-2021-1223 Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP.
network
low complexity
cisco snort
7.5
2020-11-06 CVE-2020-3444 Unspecified vulnerability in Cisco IOS XE
A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters.
network
low complexity
cisco
5.0
2020-09-24 CVE-2020-3527 Resource Exhaustion vulnerability in Cisco IOS XE
A vulnerability in the Polaris kernel of Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to crash the device.
network
low complexity
cisco CWE-400
7.8
2019-09-25 CVE-2019-12660 Improper Input Validation vulnerability in Cisco IOS XE
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to write values to the underlying memory of an affected device.
local
low complexity
cisco CWE-20
4.9