Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

13 records in Prime Data Center Network Manager · all components

Priority HIGH 79

A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directory of a vulnerable device (aka Path Traversal) and execute th…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.47557 Published 2018-05-02 No fix listed CWE-22
Priority HIGH 68

A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.35388 Published 2017-06-08 No fix listed CWE-16
Priority MEDIUM 55

A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10716 Published 2017-06-08 No fix listed CWE-264
Priority MEDIUM 48

Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to execute arbitrary commands via JBoss Applicatio…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03126 Published 2012-11-02 No fix listed CWE-264
Priority MEDIUM 46

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.05406 Published 2018-10-05 No fix listed CWE-22
Priority LOW 31

A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-ba…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01714 Published 2018-03-08 No fix listed CWE-79
Priority LOW 30

The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.003 Published 2013-04-29 No fix listed CWE-20
Priority LOW 28

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0043 Published 2024-11-18 No fix listed CWE-285
Open these records in search →