Cisco Catalyst Center vulnerabilities

26 CVEs affecting Cisco Catalyst Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20191, published 2026-07-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-1264, published 2021-01-20. High severity, CVSS 8.8. EPSS: 3.9% chance of exploitation in the next 30 days. A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input…
CVE-2019-15253, published 2020-02-05. Medium severity, CVSS 4.8. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS)…
CVE-2019-1841, published 2019-04-18. High severity, CVSS 8.1. EPSS: 2.6% chance of exploitation in the next 30 days. A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an authenticated, remote attacker to access to internal services without additional authentication. The…
CVE-2020-3411, published 2020-08-17. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in Cisco DNA Center software could allow an unauthenticated remote attacker access to sensitive information on an affected system. The vulnerability is due to improper handling of…
CVE-2021-1303, published 2021-01-20. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to…
CVE-2021-1265, published 2021-01-20. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privilege-level authenticated, remote attacker to obtain the full unmasked running configuration of…
CVE-2020-3466, published 2020-08-26. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2019-1707, published 2019-03-11. Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco DNA Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…
CVE-2021-1257, published 2021-01-20. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to manipulate…
CVE-2021-1130, published 2021-01-13. Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…

Latest

CVE-2026-20191, published 2026-07-01. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.  This vulnerability is due to insufficient…
CVE-2025-20353, published 2025-11-13. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…
CVE-2025-20349, published 2025-11-13. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This vulnerability…
CVE-2025-20346, published 2025-11-13. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should require Administrator privileges. The attacker would need valid read-only user…
CVE-2025-20223, published 2025-05-07. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that belongs to an internal service of an…
CVE-2025-20210, published 2025-05-07. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration…
CVE-2024-20350, published 2024-09-25. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This…
CVE-2024-20333, published 2024-03-27. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to change specific data within the interface…
CVE-2023-20184, published 2023-05-18. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute…
CVE-2023-20183, published 2023-05-18. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute…