Known vulnerabilities in Nexus Dashboard

Vendor: Cisco Systems, Inc
Software: Nexus Dashboard
Software CPE: cpe:2.3:a:cisco_systems:nexus_dashboard:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 27
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nexus Dashboard Nexus Dashboard is affected by 27 known vulnerabilities: 2 high, 13 medium, 12 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150734 - Improper Access Control
CVE-2026-20322		 CWE-284 Medium
No
No
 4.3.1.175 17.09.2026 SB20260917248
#VU150735 - Command injection
CVE-2026-20325		 CWE-77 Medium
No
No
 4.3.1.175 17.09.2026 SB20260917248
#VU150736 - Missing Authentication for Critical Function
CVE-2026-20326		 CWE-306 Medium
No
No
 4.3.1.175 17.09.2026 SB20260917248
#VU150737 - Exposure of sensitive information to an unauthorized actor
CVE-2026-20360		 CWE-200 Medium
No
No
 4.3.1.175 17.09.2026 SB20260917248
#VU150738 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-20361		 CWE-89 Medium
No
No
 4.3.1.175 17.09.2026 SB20260917248
#VU150739 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-76409		 CWE-22 Medium
No
No
 4.3.1.175 17.09.2026 SB20260917248
#VU124801 - Storing Passwords in a Recoverable Format
CVE-2026-20042		 CWE-257 Low
No
No
 4.2 01.04.2026 SB2026040178
#VU124799 - Cross-Site Request Forgery (CSRF)
CVE-2026-20041		 CWE-352 Medium
No
No
 4.2 01.04.2026 SB2026040176
#VU114489 - Protection Mechanism Failure
CVE-2025-20348		 CWE-693 Medium
No
No
 4.1(1g) 28.08.2025 SB2025082827
#VU114488 - Insertion of Sensitive Information Into Sent Data
CVE-2025-20347		 CWE-201 Medium
No
No
 4.1(1g) 28.08.2025 SB2025082827
#VU114487 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-20344		 CWE-22 Low
No
No
 4.1(1g) 28.08.2025 SB2025082827
#VU107561 - Information Exposure Through an Error Message
CVE-2025-20150		 CWE-209 Medium
No
No
 3.2(2f) 16.04.2025 SB20250416165
#VU97997 - Improper Authorization
CVE-2024-20442		 CWE-285 Medium
No
No
 3.2(1e) 03.10.2024 SB2024100317
#VU88122 - Cross-Site Request Forgery (CSRF)
CVE-2024-20281		 CWE-352 Low
No
No
 3.1(1k) 04.04.2024 SB2024040416
#VU88112 - Improper Access Control
CVE-2024-20283		 CWE-284 Low
No
No
 3.1(1k) 04.04.2024 SB2024040403
#VU88110 - Improper Privilege Management
CVE-2024-20282		 CWE-269 Low
No
No
 3.1(1k) 04.04.2024 SB2024040403
#VU72313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20053		 CWE-79 Low
No
No
 2.3(1c) 15.02.2023 SB2023021590
#VU72312 - Improper input validation
CVE-2023-20014		 CWE-20 Medium
No
No
 2.3(1c) 15.02.2023 SB2023021590
#VU65658 - Improper Access Control
CVE-2022-20858		 CWE-284 High
No
No
 2.2(1e) 21.07.2022 SB2022072130
#VU65657 - Command injection
CVE-2022-20857		 CWE-77 High
No
No
 2.2(1e) 21.07.2022 SB2022072130


Showing elements 1 - 20 out of 27