Known vulnerabilities in Cisco Nexus Dashboard Orchestrator (NDO)

Vendor: Cisco Systems, Inc
Software: Cisco Nexus Dashboard Orchestrator (NDO)
Software CPE: cpe:2.3:a:cisco_systems:cisco_nexus_dashboard_orchestrator_ndo:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Nexus Dashboard Orchestrator (NDO) Cisco Nexus Dashboard Orchestrator (NDO) is affected by 4 known vulnerabilities: 2 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98019 - Improper Certificate Validation
CVE-2024-20385		 CWE-295 Medium
No
No
 4.2(3o), 4.4(1.1009) 03.10.2024 SB2024100334
#VU98017 - Exposure of sensitive information to an unauthorized actor
CVE-2024-20490		 CWE-200 Low
No
No
 4.2(3o), 4.4.1.1012 03.10.2024 SB2024100333
#VU88122 - Cross-Site Request Forgery (CSRF)
CVE-2024-20281		 CWE-352 Low
No
No
 4.3(1.1008) 04.04.2024 SB2024040416
#VU88114 - Improper Access Control
CVE-2024-20302		 CWE-284 Medium
No
No
 4.2(3e) 04.04.2024 SB2024040405