Cisco Data Center Network Manager vulnerabilities

68 CVEs affecting Cisco Data Center Network Manager, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3538, published 2024-11-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability, published 2021-12-10. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 100% chance of exploitation in the next 30 days. Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker…
CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2019-15975, published 2020-01-06. Critical severity, CVSS 9.8. EPSS: 96.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary…
CVE-2019-15976, published 2020-01-06. Critical severity, CVSS 9.8. EPSS: 92.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary…
CVE-2019-1620, published 2019-06-27. Critical severity, CVSS 9.8. EPSS: 83.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The…
CVE-2019-1619, published 2019-06-27. Critical severity, CVSS 9.8. EPSS: 82.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary…
CVE-2019-1622, published 2019-06-27. Medium severity, CVSS 5.3. EPSS: 78.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected…
CVE-2019-15980, published 2020-01-06. High severity, CVSS 7.2. EPSS: 50% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct…
CVE-2019-15984, published 2020-01-06. High severity, CVSS 7.2. EPSS: 46.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected…
CVE-2019-15977, published 2020-01-06. High severity, CVSS 7.5. EPSS: 38.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary…

Latest

CVE-2020-3538, published 2024-11-18. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in a certain REST API endpoint of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to perform a path traversal attack on an…
CVE-2021-1250, published 2021-01-20. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site…
CVE-2021-1249, published 2021-01-20. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site…
CVE-2021-1248, published 2021-01-20. High severity, CVSS 7.2. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected…
CVE-2021-1247, published 2021-01-20. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected…
CVE-2021-1135, published 2021-01-20. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper…
CVE-2021-1286, published 2021-01-20. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site…
CVE-2021-1283, published 2021-01-20. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view sensitive information in a system log file that should be…