CVE-2020-3474: Cisco IOS XE

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco IOS XE: affected versions not specified

Published 2020-09-24. Last modified 2026-06-17.