Cisco Data Center Analytics Framework vulnerabilities

6 CVEs affecting Cisco Data Center Analytics Framework, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-16015, published 2020-01-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0145, published 2018-02-22. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site…
CVE-2018-0129, published 2018-02-08. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack…
CVE-2018-0128, published 2018-02-08. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack…
CVE-2019-16015, published 2020-01-26. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site…
CVE-2015-4189, published 2015-06-23. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in Cisco Data Center Analytics Framework (DCAF) 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807.
CVE-2018-0146, published 2018-02-22. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.…