CVE-2021-1250: Cisco Data Center Network Manager

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site scripting (XSS) attack or a reflected file download (RFD) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco Data Center Network Manager: before 11.5\(1\) (fixed in 11.5\(1\))

Published 2021-01-20. Last modified 2026-06-17.