Vulnerabilities > Cisco > Data Center Network Manager > High

DATE CVE VULNERABILITY TITLE RISK
2020-01-06 CVE-2019-15977 Use of Hard-coded Credentials vulnerability in Cisco Data Center Network Manager
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device.
network
low complexity
cisco CWE-798
7.5
2019-06-27 CVE-2019-1621 Path Traversal vulnerability in Cisco Data Center Network Manager 11.0(1)
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device.
network
low complexity
cisco CWE-22
7.5
2018-10-05 CVE-2018-0440 Improper Input Validation vulnerability in Cisco Data Center Network Manager
A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating system with root-level privileges.
network
low complexity
cisco CWE-20
7.2
2018-03-08 CVE-2018-0210 Cross-Site Request Forgery (CSRF) vulnerability in Cisco Data Center Network Manager 10.4(1.128)/10.4(2)
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device.
network
low complexity
cisco CWE-352
8.8
2017-11-30 CVE-2017-12343 Cross-site Scripting vulnerability in Cisco Data Center Network Manager 10.3(1)S3
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software.
network
low complexity
cisco CWE-79
8.8
2017-08-07 CVE-2011-4650 Resource Management Errors vulnerability in Cisco Data Center Network Manager 5.2(1)
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports.
network
low complexity
cisco CWE-399
7.5