Cisco Nexus Dashboard Orchestrator vulnerabilities

5 CVEs affecting Cisco Nexus Dashboard Orchestrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20491, published 2024-10-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-20302, published 2024-04-03. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an authenticated, remote attacker to modify or delete tenant templates on an affected…
CVE-2024-20385, published 2024-10-02. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an affected…
CVE-2024-20491, published 2024-10-02. High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information. This vulnerability exists because…
CVE-2024-20490, published 2024-10-02. High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in a logging function of Cisco Nexus Dashboard Fabric Controller (NDFC) and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech support file to view…
CVE-2024-20281, published 2024-04-03. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct a cross-site…