CVE Tools

Iox

9 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Iox, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Iox CVEs per month

Oct 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Iox CVEs per month
MonthCVEs
2024-100
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090

Severity

How the 9 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical111%
  • High444%
  • Medium444%

Latest CVEs

The 9 most recently published vulnerabilities affecting Iox.

  1. CVE-2023-20076Cisco IOx Application Hosting Environment Command Injection Vulnerability7.2
  2. CVE-2020-3238Cisco IOx Application Framework Arbitrary File Creation Vulnerability8.1
  3. CVE-2020-3237Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability6.3
  4. CVE-2020-3233Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability5.4
  5. CVE-2017-3853A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an unauthenticated, remote attacker to cause a stack overflow that could allow r...9.8
  6. CVE-2017-3852A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files ...8.1
  7. CVE-2017-3851A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an unauthenticated, rem...7.5
  8. CVE-2017-3805A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without ...5.3
  9. CVE-2016-9199A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. Affected Products: This vul...6.5

Product grouping is registry-driven, with AI assist and human review. How it works

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store