Vulnerabilities > Cisco > Data Center Network Manager > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-01-06 CVE-2019-15985 SQL Injection vulnerability in Cisco Data Center Network Manager
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device.
network
low complexity
cisco CWE-89
critical
9.0
2019-06-27 CVE-2019-1620 Permissions, Privileges, and Access Controls vulnerability in Cisco Data Center Network Manager 11.0(1)
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device.
network
low complexity
cisco CWE-264
critical
10.0
2018-10-05 CVE-2018-0440 Improper Input Validation vulnerability in Cisco Data Center Network Manager
A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating system with root-level privileges.
network
low complexity
cisco CWE-20
critical
9.0