Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

68 records in Data Center Network Manager · all components

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority CRITICAL 93

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96455 Published 2020-01-06 No fix listed CWE-798
Priority CRITICAL 92

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.92835 Published 2020-01-06 No fix listed CWE-798
Priority CRITICAL 90

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82815 Published 2019-06-27 Fixed in 11.1(1) CWE-284
Priority HIGH 70

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.78858 Published 2019-06-27 Fixed in 11.2(1) CWE-284
Priority HIGH 68

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administra…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.3811 Published 2020-01-06 No fix listed CWE-798
Priority HIGH 65

Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal a…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.4996 Published 2020-01-06 No fix listed CWE-22
Priority MEDIUM 64

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.46935 Published 2020-01-06 No fix listed CWE-89
Priority MEDIUM 62

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.29816 Published 2019-06-27 Fixed in 11.2(1) CWE-264
Priority MEDIUM 60

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbit…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.37458 Published 2020-01-06 No fix listed CWE-78
Priority MEDIUM 53

A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affe…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02296 Published 2020-07-31 No fix listed CWE-798
Priority MEDIUM 50

A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07038 Published 2020-07-31 No fix listed CWE-20
Priority MEDIUM 50

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions on an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01152 Published 2020-07-31 No fix listed CWE-306
Priority MEDIUM 49

Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal a…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.14322 Published 2020-01-06 No fix listed CWE-22
Priority MEDIUM 49

Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal a…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.14322 Published 2020-01-06 No fix listed CWE-22
Priority MEDIUM 44

Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01908 Published 2021-01-20 No fix listed CWE-89
Priority MEDIUM 44

Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01924 Published 2021-01-20 No fix listed CWE-89
Priority MEDIUM 44

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with a low-privileged account to bypass authorization on the API of an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02042 Published 2020-07-31 No fix listed CWE-285
Priority MEDIUM 43

A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) att…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01299 Published 2021-01-20 No fix listed CWE-918
Priority MEDIUM 43

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01452 Published 2020-02-19 No fix listed CWE-264
Priority MEDIUM 42

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actio…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01168 Published 2018-03-08 No fix listed CWE-352
Priority MEDIUM 41

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected syste…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00566 Published 2020-02-19 No fix listed CWE-352
Priority MEDIUM 41

Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject ma…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01594 Published 2017-11-30 No fix listed CWE-79
Load more
Open these records in search →