Skip to content
OpenAdvisories

Product · Cisco

Cisco Data Center Network Manager

74 known vulnerabilities.

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-15977 Public exploit EPSS 38%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

  • High 7.2
    CVE-2019-15978 Public exploit EPSS 37%

    Cisco Data Center Network Manager Command Injection Vulnerabilities

    Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operati…

  • High 7.2
    CVE-2019-15984 Public exploit EPSS 47%

    Cisco Data Center Network Manager SQL Injection Vulnerabilities

    Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would …

  • Medium 5.4
    CVE-2019-15999 Public exploit

    Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability

    A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain unauthorized access to the JBoss Enterprise Application Platform (JBoss EAP) on an affected device. The vulnerabil…

  • Critical 9.8
    CVE-2019-15975 Public exploit EPSS 96%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

  • Critical 9.8
    CVE-2019-15976 Public exploit EPSS 93%

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …

  • Critical 9.8
    CVE-2019-1620 Public exploit EPSS 84%

    Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in aff…

  • High 7.5
    CVE-2019-1621 Public exploit EPSS 30%

    Cisco Data Center Network Manager Arbitrary File Download Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settin…

  • Medium 5.3
    CVE-2019-1622 Public exploit EPSS 79%

    Cisco Data Center Network Manager Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls f…

  • Critical 9.8
    CVE-2019-1619 Public exploit EPSS 83%

    Cisco Data Center Network Manager Authentication Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The …