CVE-2021-1286: Cisco Data Center Network Manager

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site scripting (XSS) attack or a reflected file download (RFD) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco Data Center Network Manager: before 11.5\(1\) (fixed in 11.5\(1\))

Published 2021-01-20. Last modified 2026-06-17.