Known vulnerabilities in Cisco DNA Center (Catalyst Center)

Software CPE: cpe:2.3:a:cisco_systems:cisco_dna_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco DNA Center (Catalyst Center) Cisco DNA Center (Catalyst Center) is affected by 22 known vulnerabilities: 2 high, 8 medium, 12 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136667 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-20191
CWE-22 High
No
No
2.3.7.11, 3.1.6 GSMU200 02.07.2026 SB2026070204
#VU118523 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20349
CWE-78 Medium
No
No
2.3.7.10 13.11.2025 SB2025111372
#VU118522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20353
CWE-79 Low
No
No
2.3.7.10 13.11.2025 SB2025111372
#VU118521 - Improper Privilege Management
CVE-2025-20346
CWE-269 Low
No
No
2.3.7.10 13.11.2025 SB2025111372
#VU97720 - Use of Hard-coded Cryptographic Key
CVE-2024-20350
CWE-321 Medium
No
No
2.3.5.6, 2.3.7.5 26.09.2024 SB2024092617
#VU87898 - Improper Authorization
CVE-2024-20333
CWE-285 Low
No
No
2.3.5.4 28.03.2024 SB2024032820
#VU81263 - Improper Access Control
CVE-2023-20223
CWE-284 High
No
No
2.3.5.4 29.09.2023 SB2023092906
#VU76287 - Improper Authorization
CVE-2023-20184
CWE-285 Low
No
No
2.2.3.5 18.05.2023 SB2023051819
#VU76286 - Improper Authorization
CVE-2023-20183
CWE-285 Low
No
No
2.3.3.7, 2.3.5.3 18.05.2023 SB2023051818
#VU76285 - Command injection
CVE-2023-20182
CWE-77 Medium
No
No
2.3.3.7, 2.3.5.3 18.05.2023 SB2023051818
#VU73967 - Permissions, Privileges, and Access Controls
CVE-2023-20055
CWE-264 Medium
No
No
2.3.3.6 23.03.2023 SB2023032312
#VU73966 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20059
CWE-200 Low
No
No
2.3.3.7, 2.3.5.0 23.03.2023 SB2023032311
#VU60242 - Information Exposure Through Log Files
CVE-2022-20630
CWE-532 Low
No
No
2.2.3.4 02.02.2022 SB2022020209
#VU57119 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34782
CWE-200 Low
No
No
2.2.2.5, 2.2.3.3 07.10.2021 SB2021100712
#VU54189 - Improper Certificate Validation
CVE-2021-1134
CWE-295 Medium
No
No
2.2.2.1, 2.2.2.3 17.06.2021 SB2021061706
#VU49960 - Cross-Site Request Forgery (CSRF)
CVE-2021-1257
CWE-352 Low
No
No
2.1.2.0, 2.1.2.3, 2.1.2.4 20.01.2021 SB2021012512
#VU49961 - Cleartext Storage of Sensitive Information
CVE-2021-1265
CWE-312 Medium
No
No
2.1.2.0, 2.1.2.3, 2.1.2.4 20.01.2021 SB2021012512
#VU49962 - Permissions, Privileges, and Access Controls
CVE-2021-1303
CWE-264 Low
No
No
2.1.2.0, 2.1.2.3, 2.1.2.4 20.01.2021 SB2021012512
#VU49905 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1264
CWE-78 Medium
No
No
1.3.1.0 20.01.2021 SB2021012111
#VU49545 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1130
CWE-79 Low
No
No
2.2.1.0 13.01.2021 SB2021011419


Showing elements 1 - 20 out of 22