Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

26 records in Nexus Dashboard · all components

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority MEDIUM 52

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01603 Published 2022-07-21 No fix listed CWE-306
Priority MEDIUM 51

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0129 Published 2022-07-21 No fix listed CWE-306
Priority MEDIUM 50

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00599 Published 2022-07-21 No fix listed CWE-306
Priority MEDIUM 40

A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00432 Published 2025-06-04 No fix listed CWE-322
Priority LOW 38

A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) atta…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0026 Published 2024-04-03 No fix listed CWE-352
Priority LOW 35

A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00952 Published 2023-02-16 No fix listed CWE-399
Priority LOW 35

A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter communications with associated controllers or view sensitive information.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00545 Published 2022-07-21 No fix listed CWE-295
Priority LOW 34

A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0059 Published 2025-08-27 No fix listed CWE-22
Priority LOW 31

A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00305 Published 2026-04-01 No fix listed CWE-295
Priority LOW 31

A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00531 Published 2025-04-16 No fix listed CWE-209
Priority LOW 31

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01097 Published 2022-07-21 No fix listed CWE-23
Priority LOW 31

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00216 Published 2022-07-21 No fix listed CWE-367
Priority LOW 31

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00216 Published 2022-07-21 No fix listed CWE-367
Priority LOW 31

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00205 Published 2022-07-21 No fix listed CWE-367
Priority LOW 31

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00205 Published 2022-07-21 No fix listed CWE-367
Priority LOW 28

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00168 Published 2024-04-03 No fix listed CWE-269
Priority LOW 28

A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management int…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00519 Published 2023-02-16 No fix listed CWE-79
Priority LOW 24

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00255 Published 2025-08-27 No fix listed CWE-693
Priority LOW 24

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard could allow an authenticated, low-privileged, remote attacker to perform limited Administrator actions on an affected device.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00362 Published 2024-10-02 No fix listed CWE-862
Priority LOW 23

A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an affected system.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00498 Published 2026-04-01 No fix listed CWE-22
Priority LOW 23

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00299 Published 2025-08-27 No fix listed CWE-201
Load more
Open these records in search →