16.8.2

DATE	CVE	VULNERABILITY TITLE	RISK
2019-03-28	CVE-2019-1754	Improper Privilege Management vulnerability in Cisco IOS XE A vulnerability in the authorization subsystem of Cisco IOS XE Software could allow an authenticated but unprivileged (level 1), remote attacker to run privileged Cisco IOS commands by using the web UI. network low complexity cisco CWE-269	8.8
2019-03-28	CVE-2019-1745	OS Command Injection vulnerability in Cisco IOS XE A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges. local low complexity cisco CWE-78	7.8