Known vulnerabilities in Cisco Nexus Dashboard Fabric Controller (NDFC)

Vendor: Cisco Systems, Inc
Software: Cisco Nexus Dashboard Fabric Controller (NDFC)
Software CPE: cpe:2.3:h:cisco_systems:cisco_nexus_dashboard_fabric_controller_ndfc:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Nexus Dashboard Fabric Controller (NDFC) Cisco Nexus Dashboard Fabric Controller (NDFC) is affected by 14 known vulnerabilities: 1 high, 9 medium, 4 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114489 - Protection Mechanism Failure
CVE-2025-20348		 CWE-693 Medium
No
No
 - 28.08.2025 SB2025082827
#VU114488 - Insertion of Sensitive Information Into Sent Data
CVE-2025-20347		 CWE-201 Medium
No
No
 - 28.08.2025 SB2025082827
#VU110219 - Key Exchange without Entity Authentication
CVE-2025-20163		 CWE-322 High
No
No
 3.2(2f) 05.06.2025 SB2025060532
#VU100047 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-20536		 CWE-89 Medium
No
No
 12.2.1 07.11.2024 SB2024110729
#VU98044 - Cleartext Storage in a File or on Disk
CVE-2024-20448		 CWE-313 Low
No
No
 12.2.2 04.10.2024 SB2024100422
#VU98041 - Command injection
CVE-2024-20432		 CWE-77 Medium
No
No
 12.2.2 04.10.2024 SB2024100422
#VU98038 - Argument Injection or Modification
CVE-2024-20444		 CWE-88 Low
No
No
 12.2.2 04.10.2024 SB2024100422
#VU98037 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20449		 CWE-22 Medium
No
No
 12.2.2 04.10.2024 SB2024100422
#VU98017 - Exposure of sensitive information to an unauthorized actor
CVE-2024-20490		 CWE-200 Low
No
No
 12.2.2.241 03.10.2024 SB2024100333
#VU98006 - Missing Authorization
CVE-2024-20477		 CWE-862 Medium
No
No
 12.2.2 03.10.2024 SB2024100317
#VU97996 - Improper Authorization
CVE-2024-20441		 CWE-285 Medium
No
No
 12.2.2 03.10.2024 SB2024100317
#VU97995 - Improper Authorization
CVE-2024-20438		 CWE-285 Medium
No
No
 12.2.2 03.10.2024 SB2024100317
#VU88122 - Cross-Site Request Forgery (CSRF)
CVE-2024-20281		 CWE-352 Low
No
No
 - 04.04.2024 SB2024040416
#VU88119 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20348		 CWE-22 Medium
No
No
 - 04.04.2024 SB2024040413