Cisco Prime Data Center Network Manager vulnerabilities

13 CVEs affecting Cisco Prime Data Center Network Manager, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3539, published 2024-11-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0666: Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability, published 2015-04-03. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 40.4% chance of exploitation in the next 30 days. Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka…
CVE-2013-5486, published 2013-09-23. High severity, CVSS 10.0. EPSS: 76% chance of exploitation in the next 30 days. Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the…
CVE-2018-0258, published 2018-05-02. Critical severity, CVSS 9.8. EPSS: 47.6% chance of exploitation in the next 30 days. A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directory of a vulnerable device (aka Path…
CVE-2017-6639, published 2017-06-08. Critical severity, CVSS 9.8. EPSS: 35.4% chance of exploitation in the next 30 days. A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to access sensitive information…
CVE-2017-6640, published 2017-06-08. Critical severity, CVSS 9.8. EPSS: 10.7% chance of exploitation in the next 30 days. A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account…
CVE-2018-0464, published 2018-10-05. High severity, CVSS 8.1. EPSS: 5.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted…
CVE-2012-5417, published 2012-11-02. High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days. Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to execute arbitrary commands…
CVE-2014-3329, published 2014-07-29. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and earlier allows remote attackers to inject arbitrary web script or…
CVE-2013-5487, published 2013-09-23. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029.
CVE-2018-0144, published 2018-03-08. Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against…

Latest

CVE-2020-3539, published 2024-11-18. Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper…
CVE-2013-5490, published 2013-09-23. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference,…