Priority CRITICAL 100KEV
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-10 · Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority CRITICAL 93
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.96455 · Published 2020-01-06 · No fix listed CWE-798
Priority CRITICAL 92
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.92835 · Published 2020-01-06 · No fix listed CWE-798
Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority CRITICAL 90
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.8378 · Published 2019-06-27 · Fixed in 11.2(1) CWE-264
Priority CRITICAL 90
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.82815 · Published 2019-06-27 · Fixed in 11.1(1) CWE-284
Priority HIGH 70
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.78858 · Published 2019-06-27 · Fixed in 11.2(1) CWE-284
Priority HIGH 68
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administra…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.3811 · Published 2020-01-06 · No fix listed CWE-798
Priority HIGH 65
Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal a…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.4996 · Published 2020-01-06 · No fix listed CWE-22
Priority MEDIUM 64
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.46935 · Published 2020-01-06 · No fix listed CWE-89
Priority MEDIUM 62
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.29816 · Published 2019-06-27 · Fixed in 11.2(1) CWE-264
Priority MEDIUM 60
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbit…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.37458 · Published 2020-01-06 · No fix listed CWE-78
Priority MEDIUM 53
A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affe…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02296 · Published 2020-07-31 · No fix listed CWE-798
Priority MEDIUM 50
A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.07038 · Published 2020-07-31 · No fix listed CWE-20
Priority MEDIUM 50
A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions on an affected device.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01152 · Published 2020-07-31 · No fix listed CWE-306
Priority MEDIUM 49
Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal a…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.14322 · Published 2020-01-06 · No fix listed CWE-22
Priority MEDIUM 49
Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal a…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.14322 · Published 2020-01-06 · No fix listed CWE-22
Priority MEDIUM 44
Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01908 · Published 2021-01-20 · No fix listed CWE-89
Priority MEDIUM 44
Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01924 · Published 2021-01-20 · No fix listed CWE-89
Priority MEDIUM 44
A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with a low-privileged account to bypass authorization on the API of an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02042 · Published 2020-07-31 · No fix listed CWE-285
Priority MEDIUM 43
A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) att…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01299 · Published 2021-01-20 · No fix listed CWE-918
Priority MEDIUM 43
A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01452 · Published 2020-02-19 · No fix listed CWE-264
Priority MEDIUM 42
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actio…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01168 · Published 2018-03-08 · No fix listed CWE-352
Priority MEDIUM 41
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected syste…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00566 · Published 2020-02-19 · No fix listed CWE-352
Priority MEDIUM 41
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject ma…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01594 · Published 2017-11-30 · No fix listed CWE-79
Load more