Cisco Nexus Dashboard

Name: Cisco Nexus Dashboard
Brand: Cisco

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical8high10medium0low

updated 2026-10-27

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20292US	—	3.17% (88th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2024-20432US	high8.8	1.14% (67th)	—	12.2.2	2024-10-02	< 12.2.2
CVE-2024-20449US	high8.8	0.95% (61st)	—	12.2.2	2024-10-02	< 12.2.2
CVE-2024-20348US	high7.5	0.80% (57th)	—	3.1(1k)	2024-04-03	< 3.1(1k)
CVE-2024-20536US	—	0.77% (55th)	—	12.2	2024-11-06	< 12.2
CVE-2024-20444US	medium5.5	0.76% (55th)	—	12.2.2	2024-10-02	< 12.2.2
CVE-2025-20344US	high7.2	0.59% (48th)	—	4.1(1g)	2025-08-27	2 versions
CVE-2025-20150US	—	0.53% (45th)	—	3.2(2f)	2025-04-16	2 versions
CVE-2024-20441US	medium6.5	0.49% (42nd)	—	12.2.2	2024-10-02	< 12.2.2
CVE-2026-20174US	—	0.49% (42nd)	—	4.2	2026-04-01	< 4.2
CVE-2024-20477US	medium5.4OT elevated	0.45% (39th)	—	12.2.2	2024-10-02	< 12.2.2
CVE-2025-20163US	—	0.43% (37th)	—	3.2(2f)	2025-06-04	< 3.2(2f)
CVE-2024-20283US	medium4.3	0.41% (35th)	—	3.1(1k)	2024-04-03	< 3.1(1k)
CVE-2024-20302US	medium4.3	0.38% (32nd)	—	3.1(1k)	2024-04-03	< 3.1(1k)
CVE-2024-20442US	medium5.4OT elevated	0.36% (30th)	—	12.2.2	2024-10-02	< 12.2.2
CVE-2024-20438US	medium5.4OT elevated	0.36% (30th)	—	12.2.2	2024-10-02	< 12.2.2
CVE-2025-20262US	—	0.35% (29th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2024-20385US	medium5.9	0.30% (23rd)	—	12.2.2	2024-10-02	< 12.2.2
CVE-2025-20348US	medium5.0	0.30% (22nd)	—	4.1(1g)	2025-08-27	2 versions
CVE-2026-20042US	—	0.29% (22nd)	—	4.2	2026-04-01	< 4.2
CVE-2024-20491US	high8.6	0.29% (21st)	—	12.2.2	2024-10-02	< 12.2.2
CVE-2024-20490US	high8.6	0.29% (21st)	—	12.2.2	2024-10-02	< 12.2.2
CVE-2025-20241US	—	0.28% (20th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2024-20281US	high8.8	0.26% (18th)	—	3.1(1k)	2024-04-03	< 3.1(1k)
CVE-2025-20347US	—	0.26% (17th)	—	4.1(1g)	2025-08-27	2 versions
CVE-2026-20041US	—	0.24% (15th)	—	4.2	2026-04-01	< 4.2
CVE-2024-20282US	medium6.0	0.17% (6th)	—	3.1(1k)	2024-04-03	< 3.1(1k)
CVE-2025-20290US	—	0.14% (3rd)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2024-20448US	high8.6OT elevated	0.12% (2nd)	—	12.2.2	2024-10-02	< 12.2.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-862Missing Authorization3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)25 CVEs
NLNCSC-NL (CSAF)7 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan