Vulnerabilities > Cisco > Data Center Network Manager

DATE CVE VULNERABILITY TITLE RISK
2018-03-08 CVE-2018-0210 Cross-Site Request Forgery (CSRF) vulnerability in Cisco Data Center Network Manager 10.4(1.128)/10.4(2)
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device.
network
cisco CWE-352
6.8
2017-11-30 CVE-2017-12347 Cross-site Scripting vulnerability in Cisco Data Center Network Manager 10.2(1)
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software.
network
cisco CWE-79
4.3
2017-11-30 CVE-2017-12346 Cross-site Scripting vulnerability in Cisco Data Center Network Manager 10.2(1)
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software.
network
cisco CWE-79
4.3
2017-11-30 CVE-2017-12345 Cross-site Scripting vulnerability in Cisco Data Center Network Manager 10.2(1)
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software.
network
cisco CWE-79
4.3
2017-11-30 CVE-2017-12344 Open Redirect vulnerability in Cisco Data Center Network Manager 10.2(1)
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software.
network
cisco CWE-601
5.8
2017-11-30 CVE-2017-12343 Cross-site Scripting vulnerability in Cisco Data Center Network Manager 10.3(1)S3
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software.
network
low complexity
cisco CWE-79
6.5
2017-08-07 CVE-2011-4650 Resource Management Errors vulnerability in Cisco Data Center Network Manager 5.2(1)
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports.
network
low complexity
cisco CWE-399
5.0