Plan a move off Cisco IOS XE 17.15 (LTS) to a supported release.
Our summary of the source remediations. Each record below keeps the source’s own wording.
2 confirmed · 2 findings filed under this action, at any date
Coverage limitation for Cisco IOS-XE: Cisco enumerates affected versions exactly but publishes defaultStatus:unknown and no fixed version, so we can confirm that you ARE affected but can never confirm that you are not (ADR-0020). The Cisco openVuln API would close this gap at the cost of a credential.