Cisco Cisco Nexus Dashboard

Name: Cisco Cisco Nexus Dashboard
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

3critical5high11medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20292US	—	3.17% (88th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2021-1393US	critical9.8OT elevated	2.33% (83rd)	—	no fix	2021-02-24	—
CVE-2022-20857US	critical9.8OT elevated	1.60% (76th)	—	no fix	2022-07-21	2 versions
CVE-2022-20858US	critical9.8OT elevated	1.29% (70th)	—	no fix	2022-07-21	2 versions
CVE-2022-20913US	medium6.5	1.10% (65th)	—	no fix	2022-07-22	2 versions
CVE-2021-1396US	medium6.5OT elevated	1.04% (64th)	—	no fix	2021-02-24	—
CVE-2023-20014US	high7.5	0.95% (61st)	—	no fix	2023-03-01	20 versions
CVE-2022-20861US	high8.8OT elevated	0.60% (48th)	—	no fix	2022-07-21	2 versions
CVE-2025-20344US	high7.2	0.59% (48th)	—	no fix	2025-08-27	41 versions
CVE-2022-20860US	high7.4	0.55% (46th)	—	no fix	2022-07-21	2 versions
CVE-2025-20150US	—	0.53% (45th)	—	no fix	2025-04-16	23 versions
CVE-2023-20053US	medium6.1	0.52% (44th)	—	no fix	2023-03-01	20 versions
CVE-2026-20174US	—	0.49% (42nd)	—	no fix	2026-04-01	15 versions
CVE-2025-20163US	—	0.43% (37th)	—	no fix	2025-06-04	10 versions
CVE-2024-20283US	medium4.3	0.41% (35th)	—	no fix	2024-04-03	27 versions
CVE-2024-20442US	medium5.4OT elevated	0.36% (30th)	—	no fix	2024-10-02	29 versions
CVE-2025-20262US	—	0.35% (29th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2025-20348US	medium5.0	0.30% (22nd)	—	no fix	2025-08-27	41 versions
CVE-2026-20042US	—	0.29% (22nd)	—	no fix	2026-04-01	41 versions
CVE-2025-20241US	—	0.28% (20th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2024-20281US	high8.8	0.26% (18th)	—	no fix	2024-04-03	26 versions
CVE-2025-20347US	—	0.26% (17th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2026-20041US	—	0.24% (15th)	—	no fix	2026-04-01	41 versions
CVE-2022-20909US	medium6.7	0.22% (12th)	—	no fix	2022-07-22	2 versions
CVE-2022-20908US	medium6.7	0.22% (12th)	—	no fix	2022-07-22	2 versions
CVE-2022-20907US	medium6.7	0.21% (10th)	—	no fix	2022-07-22	2 versions
CVE-2022-20906US	medium6.7	0.21% (10th)	—	no fix	2022-07-22	2 versions
CVE-2024-20282US	medium6.0	0.17% (6th)	—	no fix	2024-04-03	27 versions
CVE-2025-20290US	—	0.14% (3rd)	—	no fix	2025-08-27	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-306Missing Authentication for Critical Function5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition4 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)22 CVEs
USCisco PSIRT (CSAF)21 CVEs
NLNCSC-NL (CSAF)10 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan