Cisco Cisco Data Center Network Manager
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
by severity
6critical32high35medium0low
updated 2026-10-30
01
vulnerabilities (82)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2019-15975US | critical9.8OT critical | Exploit | ||||
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and e… | ||||||
| CVE-2019-15976US | critical9.8OT critical | Exploit | ||||
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and e… | ||||||
| CVE-2019-1620US | critical9.8 | Exploit | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an af… | ||||||
| CVE-2019-1619US | critical9.8OT high | Exploit | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execu… | ||||||
| CVE-2019-1622US | medium5.3 | Exploit | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information… | ||||||
| CVE-2019-15984US | high7.2 | Exploit | ||||
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL comma… | ||||||
| CVE-2019-15977US | high7.5OT high | Exploit | ||||
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and e… | ||||||
| CVE-2019-15978US | high7.2 | Exploit | ||||
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges… | ||||||
| CVE-2019-1621US | high7.5 | Exploit | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files… | ||||||
| CVE-2019-15999US | medium6.3 | Exploit | ||||
A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain unauthorized access to the JBoss En… | ||||||
| CVE-2019-15980US | high7.2 | — | ||||
Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote a… | ||||||
| CVE-2019-15982US | high7.2 | — | ||||
Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote a… | ||||||
| CVE-2019-15981US | high7.2 | — | ||||
Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote a… | ||||||
| CVE-2020-3383US | high8.8 | — | ||||
A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affect… | ||||||
| CVE-2018-0464US | high8.1 | — | ||||
A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive file… | ||||||
| CVE-2019-15985US | high7.2 | — | ||||
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL comma… | ||||||
| CVE-2019-15979US | high7.2 | — | ||||
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges… | ||||||
| CVE-2025-20292US | — | — | ||||
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affec… | ||||||
| CVE-2020-3382US | critical9.8OT elevated | — | ||||
A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions w… | ||||||
| CVE-2018-0440US | high7.2 | — | ||||
A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating sys… | ||||||
| CVE-2020-3386US | high8.8OT elevated | — | ||||
A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with a low-privileged account to bypass authoriza… | ||||||
| CVE-2021-1247US | high8.8 | — | ||||
Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands o… | ||||||
| CVE-2021-1248US | high7.2 | — | ||||
Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands o… | ||||||
| CVE-2020-3521US | medium6.5 | — | ||||
A vulnerability in a specific REST API of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to conduct directory traversal attacks on… | ||||||
| CVE-2020-3112US | high8.8 | — | ||||
A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vul… | ||||||
| CVE-2019-15983US | medium4.9 | — | ||||
A vulnerability in the SOAP API of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain read access to information that is stored on an af… | ||||||
| CVE-2021-1272US | high8.8 | — | ||||
A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass access controls and conduct… | ||||||
| CVE-2020-3461US | medium5.3OT elevated | — | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to obtain confidential information… | ||||||
| CVE-2018-0210US | high8.8 | — | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (… | ||||||
| CVE-2020-3376US | critical9.8OT elevated | — | ||||
A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute a… | ||||||
| CVE-2024-20432US | high8.8 | — | ||||
A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command inje… | ||||||
| CVE-2021-1133US | high7.3 | — | ||||
Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without… | ||||||
| CVE-2020-3377US | high8.8 | — | ||||
A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the affe… | ||||||
| CVE-2020-3519US | high8.1 | — | ||||
A vulnerability in a specific REST API method of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to conduct a path traversal attack… | ||||||
| CVE-2021-1286US | medium6.1 | — | ||||
Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct… | ||||||
| CVE-2024-20449US | high8.8 | — | ||||
A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with low privileges to execute arbitrary code on an affected device.… | ||||||
| CVE-2018-0450US | medium6.1 | — | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) a… | ||||||
| CVE-2020-3522US | medium6.3OT elevated | — | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to bypass authorization on… | ||||||
| CVE-2024-20348US | high7.5 | — | ||||
A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbit… | ||||||
| CVE-2020-3356US | medium6.1 | — | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… | ||||||
| CVE-2020-3384US | high8.2 | — | ||||
A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the underly… | ||||||
| CVE-2021-1269US | medium6.3OT elevated | — | ||||
Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete… | ||||||
| CVE-2024-20536US | — | — | ||||
A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-… | ||||||
| CVE-2024-20444US | medium5.5 | — | ||||
A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-adm… | ||||||
| CVE-2020-3462US | medium6.3 | — | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on… | ||||||
| CVE-2020-3460US | medium6.1 | — | ||||
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… | ||||||
| CVE-2021-1255US | medium5.4 | — | ||||
Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without… | ||||||
| CVE-2021-1270US | medium6.5OT elevated | — | ||||
Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete… | ||||||
| CVE-2021-1135US | medium4.3 | — | ||||
Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without… | ||||||
| CVE-2020-3380US | high7.8 | — | ||||
A vulnerability in the CLI of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to elevate privileges to root and execute arbitrary commands on… | ||||||
showing 50 of 82
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-79Improper Neutralization of Input During Web Page Generation15 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory12 CVEs
- CWE-20Improper Input Validation10 CVEs
- CWE-89Improper Neutralization of Special Elements used in an SQL Command6 CVEs
- CWE-798Use of Hard-coded Credentials5 CVEs
- CWE-184Incomplete List of Disallowed Inputs4 CVEs
- CWE-264CWE-2644 CVEs
- CWE-284Improper Access Control4 CVEs
03
sources (3)
Which sources assert this record, and when.
- USCisco PSIRT (CSAF)76 CVEs
- EUEU Vulnerability Database (ENISA)74 CVEs
- NLNCSC-NL (CSAF)7 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan