Nexus Dashboard vulnerabilities | LiveThreat CVE Feed

Product

Nexus Dashboard

by Cisco · last CVE Apr 1, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 2High 6Medium 17Low 0

Severity

All severities25 Critical2 High6 Medium17 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Nexus Dashboard to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-20858	9.8	1%	Jul 21	Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a… Affected: 2.0 before 2.2\(1e\)
CVE-2022-20857	9.8	2%	Jul 21	Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a… Affected: 1.0 before 2.2\(1e\)
CVE-2024-20281	8.8	0%	Apr 3	A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct… Affected: before 3.1(1k)
CVE-2022-20861	8.8	1%	Jul 21	Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a… Affected: 1.1 before 2.2\(1e\)
CVE-2025-20163	8.7	0%	Jun 4	Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability Affected: before 3.2\(2f\)
CVE-2023-20014	7.5	1%	Mar 1	A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition Affected: before 2.3\(1c\)
CVE-2022-20860	7.4	1%	Jul 21	A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter communications with associated controllers or view… Affected: 1.1 before 2.2\(1h\)
CVE-2025-20344	7.2	1%	Aug 27	Cisco Nexus Dashboard Path Traversal Vulnerability Affected: before 4.1\(1g\)
CVE-2022-20909	6.7	0%	Jul 22	Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device Affected: 2.0 before 2.2\(1e\)
CVE-2022-20908	6.7	0%	Jul 22	Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device Affected: 2.0 before 2.2\(1e\)
CVE-2022-20907	6.7	0%	Jul 22	Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device Affected: 2.0 before 2.2\(1e\)
CVE-2022-20906	6.7	0%	Jul 22	Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device Affected: 2.0 before 2.2\(1e\)
CVE-2026-20042	6.5	0%	Apr 1	Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability Affected: before 4.2.1
CVE-2024-20441	6.5	0%	Oct 2	Cisco Nexus Dashboard Fabric Controller Unauthorized API Endpoint Vulnerability Affected: before 3.2\(1e\)
CVE-2022-20913	6.5	1%	Jul 22	A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device Affected: 2.0 before 2.2\(1e\)
CVE-2023-20053	6.1	1%	Mar 1	A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: before 2.3\(1c\)
CVE-2024-20282	6.0	0%	Apr 3	A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device Affected: before 3.1(1k)
CVE-2025-20347	5.4	0%	Aug 27	Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability Affected: before 4.1\(1g\)
CVE-2024-20477	5.4	0%	Oct 2	Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Endpoint Vulnerability Affected: before 3.2\(1e\)
CVE-2024-20442	5.4	0%	Oct 2	Cisco Nexus Dashboard Unauthorized API Endpoints Vulnerability Affected: before 3.2\(1e\)
CVE-2024-20438	5.4	0%	Oct 2	Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability Affected: before 3.2\(1e\)
CVE-2025-20150	5.3	1%	Apr 16	Cisco Nexus Dashboard Username Enumeration Vulnerability Affected: before 3.2\(2f\)
CVE-2025-20348	5.0	0%	Aug 27	Cisco Nexus Dashboard Unauthorized REST API Vulnerability Affected: before 4.1\(1g\)
CVE-2026-20174	4.9	0%	Apr 1	Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability Affected: 3.1\(1k\) before 4.2.1
CVE-2024-20283	4.3	0%	Apr 3	A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment information on an affected device Affected: before 3.1(1k)