Cisco Nexus Dashboard — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Nexus Dashboard, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (26)

• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2022-20857 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or…
• CVE-2022-20861 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or…
• CVE-2022-20858 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or…
• CVE-2025-20163 — CVSS 8.7 (high): A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker…
• CVE-2024-20281 — CVSS 7.5 (high): A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an…
• CVE-2023-20014 — CVSS 7.5 (high): A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a…
• CVE-2022-20860 — CVSS 7.4 (high): A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter…
• CVE-2025-20344 — CVSS 6.5 (medium): A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a…
• CVE-2026-20042 — CVSS 6.5 (medium): A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and…
• CVE-2024-20438 — CVSS 6.3 (medium): A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write…
• CVE-2023-20053 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a…
• CVE-2024-20282 — CVSS 6.0 (medium): A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate…
• CVE-2022-20906 — CVSS 6.0 (medium): Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device…
• CVE-2022-20907 — CVSS 6.0 (medium): Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device…
• CVE-2022-20908 — CVSS 6.0 (medium): Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device…
• CVE-2022-20909 — CVSS 6.0 (medium): Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device…
• CVE-2024-20441 — CVSS 5.7 (medium): A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to learn…
• CVE-2024-20477 — CVSS 5.4 (medium): A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or…
• CVE-2024-20442 — CVSS 5.4 (medium): A vulnerability in the REST API endpoints of Cisco Nexus Dashboard could allow an authenticated, low-privileged, remote attacker to perform…
• CVE-2025-20347 — CVSS 5.4 (medium): A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an…
• CVE-2025-20150 — CVSS 5.3 (medium): A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts. This…
• CVE-2025-20348 — CVSS 5.0 (medium): A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an…
• CVE-2026-20174 — CVSS 4.9 (medium): A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write…
• CVE-2022-20913 — CVSS 4.9 (medium): A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device. This…
• CVE-2024-20283 — CVSS 4.3 (medium): A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment information on an…