Cisco Data Center Network Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Data Center Network Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (68)

• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2019-15975 — CVSS 9.8 (critical): Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated…
• CVE-2019-15976 — CVSS 9.8 (critical): Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated…
• CVE-2019-1620 — CVSS 9.8 (critical): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…
• CVE-2019-1619 — CVSS 9.8 (critical): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…
• CVE-2020-3382 — CVSS 9.8 (critical): A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass…
• CVE-2020-3114 — CVSS 8.8 (high): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…
• CVE-2020-3112 — CVSS 8.8 (high): A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to…
• CVE-2021-1272 — CVSS 8.8 (high): A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…
• CVE-2017-12343 — CVSS 8.8 (high): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into…
• CVE-2020-3386 — CVSS 8.8 (high): A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with a…
• CVE-2020-3383 — CVSS 8.8 (high): A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct…
• CVE-2021-1247 — CVSS 8.8 (high): Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote…
• CVE-2018-0210 — CVSS 8.8 (high): A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker…
• CVE-2021-1248 — CVSS 8.8 (high): Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote…
• CVE-2020-3384 — CVSS 8.2 (high): A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to…
• CVE-2020-3519 — CVSS 8.1 (high): A vulnerability in a specific REST API method of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote…
• CVE-2020-3380 — CVSS 7.8 (high): A vulnerability in the CLI of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to elevate privileges…
• CVE-2021-1276 — CVSS 7.5 (high): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) could allow an attacker to spoof a trusted host or construct a…
• CVE-2019-1621 — CVSS 7.5 (high): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…
• CVE-2011-4650 — CVSS 7.5 (high): Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very…
• CVE-2019-15977 — CVSS 7.5 (high): Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated…
• CVE-2021-1277 — CVSS 7.5 (high): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) could allow an attacker to spoof a trusted host or construct a…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2020-3376 — CVSS 7.3 (high): A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…
• CVE-2019-15984 — CVSS 7.2 (high): Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated…
• CVE-2018-0440 — CVSS 7.2 (high): A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute…
• CVE-2019-15985 — CVSS 7.2 (high): Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated…
• CVE-2019-15980 — CVSS 7.2 (high): Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager…
• CVE-2019-15979 — CVSS 7.2 (high): Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated…
• CVE-2019-15978 — CVSS 7.2 (high): Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated…
• CVE-2019-15981 — CVSS 7.2 (high): Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager…
• CVE-2019-15982 — CVSS 7.2 (high): Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager…
• CVE-2021-1253 — CVSS 6.5 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker…
• CVE-2020-3523 — CVSS 6.5 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated…
• CVE-2021-1250 — CVSS 6.5 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker…
• CVE-2021-1249 — CVSS 6.5 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker…
• CVE-2021-1286 — CVSS 6.5 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker…
• CVE-2020-3518 — CVSS 6.5 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated…
• CVE-2021-1269 — CVSS 6.3 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated…
• CVE-2019-15999 — CVSS 6.3 (medium): A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to…
• CVE-2020-3377 — CVSS 6.3 (medium): A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker…
• CVE-2020-3462 — CVSS 6.3 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote…
• CVE-2020-3522 — CVSS 6.3 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated…
• CVE-2021-1270 — CVSS 6.3 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated…
• CVE-2020-3460 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…
• CVE-2017-12347 — CVSS 6.1 (medium): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into…
• CVE-2017-12344 — CVSS 6.1 (medium): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into…
• CVE-2020-3356 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…
• CVE-2018-0450 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker…
• CVE-2017-12346 — CVSS 6.1 (medium): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into…
• CVE-2021-1283 — CVSS 5.5 (medium): A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view…
• CVE-2020-3520 — CVSS 5.5 (medium): A vulnerability in Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, local attacker to obtain confidential…
• CVE-2020-3113 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote…
• CVE-2020-3521 — CVSS 5.3 (medium): A vulnerability in a specific REST API of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker…
• CVE-2020-3461 — CVSS 5.3 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…
• CVE-2019-1622 — CVSS 5.3 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…
• CVE-2019-15983 — CVSS 4.9 (medium): A vulnerability in the SOAP API of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain read…
• CVE-2020-3348 — CVSS 4.8 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated…
• CVE-2020-3355 — CVSS 4.8 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote…
• CVE-2020-3354 — CVSS 4.8 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote…
• CVE-2020-3349 — CVSS 4.8 (medium): Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated…
• CVE-2020-3439 — CVSS 4.8 (medium): A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated…
• CVE-2017-12345 — CVSS 4.7 (medium): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into…
• CVE-2021-1255 — CVSS 4.6 (medium): Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker…
• CVE-2021-1135 — CVSS 4.6 (medium): Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker…
• CVE-2021-1133 — CVSS 4.6 (medium): Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker…
• CVE-2020-3538 — CVSS 4.6 (medium): A vulnerability in a certain REST API endpoint of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated…