cisco network services orchestrator

Name: cisco network services orchestrator
Brand: cisco

productUS

cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical6high3medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	5.4.5.2	2021-12-10	5 versions
CVE-2025-32433US	—OT critical	98.9% (100th)	KEV	6.3.8.1	2025-04-16	6 versions
CVE-2018-0274US	high8.8	3.77% (90th)	—	no fix	2018-06-07	4 versions
CVE-2021-1132US	high7.5	1.63% (76th)	—	no fix	2024-11-18	4 versions
CVE-2018-0463US	high7.5	1.49% (74th)	—	no fix	2018-10-05	= 1.2.0
CVE-2023-20040US	medium5.5	1.24% (69th)	—	5.6.7	2023-01-20	5 versions
CVE-2024-20381US	high8.8	0.58% (47th)	—	no fix	2024-09-11	163 versions
CVE-2024-20369US	medium6.1	0.31% (24th)	—	6.1.7	2024-05-15	7 versions
CVE-2020-3362US	medium4.7	0.25% (17th)	—	4.7.7.3	2020-06-18	2 versions
CVE-2021-1572US	high7.8	0.23% (14th)	—	no fix	2021-08-04	2 versions
CVE-2024-20366US	high7.8	0.20% (9th)	—	6.0.2	2024-05-15	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-23Relative Path Traversal1 CVEs
CWE-264CWE-2641 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.