Data Center Network Manager vulnerabilities | LiveThreat CVE Feed

Product

Data Center Network Manager

by Cisco · last CVE Nov 18, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities70 In the news0 Timeline

Severity mix

Critical 6High 29Medium 35Low 0

Severity

All severities70 Critical6 High29 Medium35 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Data Center Network Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-3382	9.8	2%	Jul 31	A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions… Affected: before 11.4\(1\)
CVE-2020-3376	9.8	1%	Jul 31	A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute… Affected: 11.0(1); 11.1(1); 11.2(1); 11.3(1)
CVE-2019-15976	9.8	93%	Jan 6	Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and… Affected: before 11.3\(1\)
CVE-2019-15975	9.8	96%	Jan 6	Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and… Affected: before 11.3\(1\)
CVE-2019-1620	9.8	84%	Jun 27	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an… Affected: 11.0(1)
CVE-2019-1619	9.8	83%	Jun 27	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and… Affected: 10.4(2)
CVE-2024-20536	8.8	1%	Nov 6	Cisco Nexus Dashboard Fabric Controller SQL Injection Vulnerability Affected: 12.1.2e; 12.1.2p; 12.1.3b
CVE-2024-20449	8.8	1%	Oct 2	Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability Affected: 12.1(1); 12.0.1a; 12.0.2d; 12.0.2f; 12.1.1; 12.1.1e; +5 more
CVE-2024-20432	8.8	1%	Oct 2	Cisco Nexus Dashboard Fabric Controller Web UI Command Injection Vulnerability Affected: 12.1(1); 12.0.1a; 12.0.2d; 12.0.2f; 12.1.1; 12.1.1e; +5 more
CVE-2021-1247	8.8	2%	Jan 20	Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands… Affected: before 11.5\(1\)
CVE-2021-1272	8.8	1%	Jan 20	A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass access controls and conduct… Affected: before 11.5\(1\)
CVE-2020-3386	8.8	2%	Jul 31	A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with a low-privileged account to bypass… Affected: before 11.4\(1\)
CVE-2020-3383	8.8	7%	Jul 31	A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an… Affected: before 11.4\(1\)
CVE-2020-3377	8.8	1%	Jul 31	A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the… Affected: 11.0(1); 11.1(1); 11.2(1); 11.3(1)
CVE-2020-3114	8.8	1%	Feb 19	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: before 11.3\(1\)
CVE-2020-3112	8.8	1%	Feb 19	A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application Affected: before 11.3\(1\)
CVE-2018-0210	8.8	1%	Mar 8	A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: 10.4(1.128); 10.4(2)
CVE-2017-12343	8.8	2%	Nov 30	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect… Affected: 10.3(1)s3
CVE-2020-3384	8.2	1%	Jul 31	A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the… Affected: before 11.4\(1\)
CVE-2020-3538	8.1	1%	Nov 18	Cisco Data Center Network Manager Path Traversal Vulnerability Affected: before 11.4\(1\)
CVE-2020-3519	8.1	1%	Aug 26	A vulnerability in a specific REST API method of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to conduct a path traversal attack… Affected: before 11.4\(1\)
CVE-2020-3380	7.8	1%	Jul 16	A vulnerability in the CLI of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to elevate privileges to root and execute arbitrary commands on… Affected: before 11.4\(1\)
CVE-2019-15977	7.5	38%	Jan 6	Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and… Affected: before 11.3\(1\)
CVE-2019-1621	7.5	30%	Jun 27	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files… Affected: 11.0(1)
CVE-2011-4650	7.5	1%	Aug 7	Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports Affected: 5.2(1)
CVE-2021-1133	7.3	1%	Jan 20	Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data… Affected: before 11.4\(1\)
CVE-2021-1248	7.2	2%	Jan 20	Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands… Affected: before 11.5\(1\)
CVE-2019-15985	7.2	3%	Jan 6	Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL… Affected: before 11.3\(1\)
CVE-2019-15984	7.2	47%	Jan 6	Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL… Affected: before 11.3\(1\)
CVE-2019-15982	7.2	14%	Jan 6	Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote… Affected: before 11.3\(1\)
CVE-2019-15981	7.2	14%	Jan 6	Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote… Affected: before 11.3\(1\)
CVE-2019-15980	7.2	50%	Jan 6	Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote… Affected: before 11.3\(1\)
CVE-2019-15979	7.2	3%	Jan 6	Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative… Affected: before 11.3\(1\)
CVE-2019-15978	7.2	37%	Jan 6	Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative… Affected: before 11.3\(1\)
CVE-2018-0440	7.2	2%	Oct 5	A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating… Affected: before 11.0\(1\)
CVE-2021-1277	6.5	0%	Jan 20	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive… Affected: before 11.5\(1\)
CVE-2021-1276	6.5	0%	Jan 20	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive… Affected: before 11.5\(1\)
CVE-2021-1270	6.5	1%	Jan 20	Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and… Affected: before 11.5\(1\)
CVE-2020-3521	6.5	2%	Aug 26	A vulnerability in a specific REST API of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to conduct directory traversal attacks on… Affected: before 11.4\(1\)
CVE-2021-1269	6.3	1%	Jan 20	Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and… Affected: before 11.5\(1\)
CVE-2020-3522	6.3	1%	Aug 26	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to bypass authorization on… Affected: before 11.4\(1\)
CVE-2020-3462	6.3	1%	Jul 31	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on… Affected: before 11.4\(1\)
CVE-2019-15999	6.3	4%	Jan 6	A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain unauthorized access to the JBoss… Affected: before 11.3\(1\)
CVE-2021-1286	6.1	1%	Jan 20	Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to… Affected: before 11.5\(1\)
CVE-2020-3460	6.1	1%	Jul 31	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: before 11.4\(1\)
CVE-2020-3356	6.1	1%	Jun 18	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: through 11.3\(1\)
CVE-2018-0450	6.1	1%	Oct 5	A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 10.4(2)
CVE-2017-12347	6.1	1%	Nov 30	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect… Affected: 10.2(1)
CVE-2017-12346	6.1	1%	Nov 30	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect… Affected: 10.2(1)
CVE-2017-12344	6.1	1%	Nov 30	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect… Affected: 10.2(1)