Priority CRITICAL 100KEV
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-10 · Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority MEDIUM 52
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01603 · Published 2022-07-21 · No fix listed CWE-306
Priority MEDIUM 51
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0129 · Published 2022-07-21 · No fix listed CWE-306
Priority MEDIUM 50
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00599 · Published 2022-07-21 · No fix listed CWE-306
Priority MEDIUM 40
A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices.
CVSS 3.1HIGH 8.7· Network · No auth · No interaction · EPSS 0.00432 · Published 2025-06-04 · No fix listed CWE-322
Priority LOW 38
A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) atta…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0026 · Published 2024-04-03 · No fix listed CWE-352
Priority LOW 35
A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00952 · Published 2023-02-16 · No fix listed CWE-399
Priority LOW 35
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter communications with associated controllers or view sensitive information.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00545 · Published 2022-07-21 · No fix listed CWE-295
Priority LOW 34
A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0059 · Published 2025-08-27 · No fix listed CWE-22
Priority LOW 31
A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00305 · Published 2026-04-01 · No fix listed CWE-295
Priority LOW 31
A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00531 · Published 2025-04-16 · No fix listed CWE-209
Priority LOW 31
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.01097 · Published 2022-07-21 · No fix listed CWE-23
Priority LOW 31
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00216 · Published 2022-07-21 · No fix listed CWE-367
Priority LOW 31
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00216 · Published 2022-07-21 · No fix listed CWE-367
Priority LOW 31
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00205 · Published 2022-07-21 · No fix listed CWE-367
Priority LOW 31
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00205 · Published 2022-07-21 · No fix listed CWE-367
Priority LOW 29
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to learn sensitive information on an affected device.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00491 · Published 2024-10-02 · No fix listed CWE-285
Priority LOW 28
A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected device.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2024-10-02 · No fix listed CWE-693
Priority LOW 28
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00168 · Published 2024-04-03 · No fix listed CWE-269
Priority LOW 28
A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management int…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00519 · Published 2023-02-16 · No fix listed CWE-79
Priority LOW 25
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an affected device.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00453 · Published 2024-10-02 · No fix listed CWE-862
Priority LOW 24
A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00255 · Published 2025-08-27 · No fix listed CWE-693
Priority LOW 24
A vulnerability in the REST API endpoints of Cisco Nexus Dashboard could allow an authenticated, low-privileged, remote attacker to perform limited Administrator actions on an affected device.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2024-10-02 · No fix listed CWE-862
Priority LOW 23
A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an affected system.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00498 · Published 2026-04-01 · No fix listed CWE-22
Priority LOW 23
A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload…
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00299 · Published 2025-08-27 · No fix listed CWE-201
Load more