Cisco Cisco Digital Network Architecture Center (DNA Center)

Name: Cisco Cisco Digital Network Architecture Center (DNA Center)
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

6critical14high12medium0low

updated 2026-10-27

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-15253US	medium4.8	3.12% (88th)	Exploit	no fix	2020-02-05	3 versions
CVE-2018-0427US	high8.8	6.06% (93rd)	—	no fix	2018-08-15	—
CVE-2018-0268US	critical10.0	4.92% (92nd)	—	no fix	2018-05-17	—
CVE-2021-1264US	high8.8	3.89% (90th)	—	no fix	2021-01-20	2 versions
CVE-2018-0222US	critical10.0OT elevated	3.54% (89th)	—	no fix	2018-05-17	—
CVE-2018-15386US	critical9.8	3.44% (89th)	—	no fix	2018-10-05	2 versions
CVE-2019-1841US	high8.1	2.60% (85th)	—	DNAC1.2.5	2019-04-18	2 versions
CVE-2018-0271US	critical9.8	2.50% (85th)	—	no fix	2018-05-17	—
CVE-2020-3411US	high7.5	2.22% (83rd)	—	no fix	2020-08-17	2 versions
CVE-2018-0448US	critical9.8	2.14% (82nd)	—	no fix	2018-10-05	2 versions
CVE-2021-1303US	high8.8	1.42% (73rd)	—	no fix	2021-01-20	2 versions
CVE-2020-3391US	medium6.5	1.31% (70th)	—	no fix	2020-07-02	2 versions
CVE-2018-0269US	medium4.3OT elevated	1.26% (70th)	—	no fix	2018-04-19	—
CVE-2020-3281US	high8.8	1.05% (64th)	—	no fix	2020-06-03	2 versions
CVE-2021-1265US	medium6.5OT elevated	0.93% (60th)	—	no fix	2021-01-20	2 versions
CVE-2020-3466US	medium6.1	0.92% (60th)	—	no fix	2020-08-26	2 versions
CVE-2019-1707US	medium5.4	0.88% (59th)	—	1.2.5	2019-03-11	2 versions
CVE-2021-1257US	high8.8	0.85% (58th)	—	no fix	2021-01-20	2 versions
CVE-2021-1130US	medium4.8	0.83% (57th)	—	no fix	2021-01-13	2 versions
CVE-2021-34782US	medium4.3	0.78% (56th)	—	no fix	2021-10-06	2 versions
CVE-2021-1134US	high7.4	0.77% (56th)	—	no fix	2021-06-29	2 versions
CVE-2023-20055US	high8.8	0.74% (55th)	—	no fix	2023-03-23	2 versions
CVE-2019-1848US	critical9.3	0.73% (54th)	—	1.3	2019-06-20	2 versions
CVE-2023-20223US	high8.2	0.64% (50th)	—	no fix	2023-09-27	10 versions
CVE-2023-20182US	high8.8	0.62% (50th)	—	no fix	2023-05-18	2 versions
CVE-2025-20341US	—	0.51% (43rd)	—	no fix	2025-11-13	6 versions
CVE-2023-20183US	medium4.3	0.49% (42nd)	—	no fix	2023-05-18	2 versions
CVE-2023-20184US	medium4.3	0.48% (42nd)	—	no fix	2023-05-18	2 versions
CVE-2024-20350US	high8.1OT elevated	0.42% (36th)	—	no fix	2024-09-25	86 versions
CVE-2025-20210US	—OT elevated	0.41% (35th)	—	no fix	2025-05-07	101 versions
CVE-2023-20059US	medium6.5OT elevated	0.41% (35th)	—	no fix	2023-03-23	2 versions
CVE-2025-20349US	high8.8	0.39% (33rd)	—	no fix	2025-11-13	109 versions
CVE-2024-20333US	—	0.36% (30th)	—	no fix	2024-03-27	27 versions
CVE-2018-0368US	high7.8	0.33% (27th)	—	no fix	2018-07-16	—
CVE-2025-20346US	—	0.29% (21st)	—	no fix	2025-11-13	108 versions
CVE-2025-20223US	—	0.28% (21st)	—	no fix	2025-05-07	2 versions
CVE-2025-20355US	—	0.26% (18th)	—	no fix	2025-11-13	110 versions
CVE-2025-20353US	—	0.24% (15th)	—	no fix	2025-11-13	105 versions
CVE-2022-20630US	medium4.4	0.23% (13th)	—	no fix	2022-02-10	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-285Improper Authorization4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-312Cleartext Storage of Sensitive Information2 CVEs

sources (2)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)35 CVEs
EUEU Vulnerability Database (ENISA)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan