Known vulnerabilities in Cisco Data Center Network Manager - page 2

Software CPE: cpe:2.3:a:cisco_systems:cisco_data_center_network_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 182
Public exploits: 11
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Data Center Network Manager Cisco Data Center Network Manager is affected by 182 known vulnerabilities: 8 high, 146 medium, 28 low Critical High Medium Low

Vulnerabilities (182)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU45788 - Improper Authorization
CVE-2020-3540
CWE-285 Medium
No
No
11.4.1 19.08.2020 SB2020081914
#VU45787 - Improper Authorization
CVE-2020-3539
CWE-285 Medium
No
No
11.4.0.379, 11.4.1 19.08.2020 SB2020081914
#VU45786 - Improper Access Control
CVE-2020-3522
CWE-284 Medium
No
No
11.4.1 19.08.2020 SB2020081914
#VU45785 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3520
CWE-200 Low
No
No
11.4.0.265, 11.4.1 19.08.2020 SB2020081914
#VU45784 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3521
CWE-22 Medium
No
No
11.4.0.232, 11.4.1 19.08.2020 SB2020081914
#VU32918 - Missing Authentication for Critical Function
CVE-2020-3376
CWE-306 Medium
No
No
11.4.1 30.07.2020 SB2020072206
#VU32917 - Use of Hard-coded Credentials
CVE-2020-3382
CWE-798 High
No
No
11.4.1 30.07.2020 SB2020072206
SB2022102415
#VU32916 - Improper Authorization
CVE-2020-3386
CWE-285 Medium
No
No
11.4.1 30.07.2020 SB2020072206
#VU32915 - Missing Authentication for Critical Function
CVE-2020-3461
CWE-306 Medium
No
No
11.4.1 30.07.2020 SB2020072206
#VU32914 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3383
CWE-22 Medium
No
No
11.4.1 30.07.2020 SB2020072206
#VU32913 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-3384
CWE-78 Medium
No
No
11.4.1 30.07.2020 SB2020072206
#VU32912 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-3462
CWE-89 Medium
No
No
11.4.1 30.07.2020 SB2020072206
#VU32911 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-3377
CWE-78 Medium
No
No
11.4.1 30.07.2020 SB2020072206
#VU32910 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3460
CWE-79 Low
No
No
11.4.1 30.07.2020 SB2020072206
#VU31749 - Permissions, Privileges, and Access Controls
CVE-2020-3380
CWE-264 Low
No
No
11.4.1 22.07.2020 SB2020072206
#VU31748 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3349
CWE-79 Low
No
No
11.4.1 22.07.2020 SB2020072206
#VU31747 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3348
CWE-79 Low
No
No
11.4.1 22.07.2020 SB2020072206
#VU29150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3356
CWE-79 Low
No
No
11.4.0.35, 11.4.1 18.06.2020 SB2020061817
#VU29149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3355
CWE-79 Low
No
No
11.4.0.38, 11.4.0.40, 11.4.1 18.06.2020 SB2020061817
#VU29148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3354
CWE-79 Low
No
No
11.4.0.30, 11.4.1 18.06.2020 SB2020061817


Showing elements 21 - 40 out of 182