Vulnerabilities > CVE-2021-1286 - Unspecified vulnerability in Cisco Data Center Network Manager

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

cisco

NVD

Published: 2021-01-20

Updated: 2024-11-21

Summary

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site scripting (XSS) attack or a reflected file download (RFD) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Data Center Network Manager - Cisco Data Center Network Manager 4.0 Cisco Data Center Network Manager 4.1 Cisco Data Center Network Manager 4.2 Cisco Data Center Network Manager 5.0 Cisco Data Center Network Manager 5.2\(1\) Cisco Data Center Network Manager 10.0 Cisco Data Center Network Manager 10.1 Cisco Data Center Network Manager 10.2\(1\) Cisco Data Center Network Manager 10.3\(1\) Cisco Data Center Network Manager 10.3\(1\)S3 Cisco Data Center Network Manager 10.4\(1\) Cisco Data Center Network Manager 10.4\(1.128\) Cisco Data Center Network Manager 10.4\(2\) Cisco Data Center Network Manager 11.0\(1\) Cisco Data Center Network Manager 11.1\(1\) Cisco Data Center Network Manager 11.2\(1\) Cisco Data Center Network Manager 11.3\(1\) Cisco Data Center Network Manager 11.4\(1\)	19

Summary

Vulnerable Configurations

References