Nexus Dashboard (Cisco) - vulnerabilities (CVEs)

26 CVEs, 0 in the last 30 days, 55 known versions, newest CVE from 2026-04-01. Vendor: Cisco.

CVEs of Nexus Dashboard

CVE-2026-20174 - CVSS 4.9 (medium), 2026-04-01: A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an…
CVE-2026-20042 - CVSS 6.5 (medium), 2026-04-01: A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or…
CVE-2025-20348 - CVSS 5 (medium), 2025-08-27: A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated,…
CVE-2025-20347 - CVSS 5.4 (medium), 2025-08-27: A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated,…
CVE-2025-20344 - CVSS 7.2 (high), 2025-08-27: A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack…
CVE-2025-20163 - CVSS 8.7 (high), 2025-06-04: A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate…
CVE-2025-20150 - CVSS 5.3 (medium), 2025-04-16: A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts. This vulnerability is due to the…
CVE-2024-20477 - CVSS 5.4 (medium), 2024-10-02: A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an…
CVE-2024-20442 - CVSS 5.4 (medium), 2024-10-02: A vulnerability in the REST API endpoints of Cisco Nexus Dashboard could allow an authenticated, low-privileged, remote attacker to perform limited…
CVE-2024-20441 - CVSS 6.5 (medium), 2024-10-02: A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to learn sensitive information on…
CVE-2024-20438 - CVSS 6.3 (medium), 2024-10-02: A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected…
CVE-2024-20283 - CVSS 4.3 (medium), 2024-04-03: A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment information on an affected device. This…
CVE-2024-20282 - CVSS 6 (medium), 2024-04-03: A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an…
CVE-2024-20281 - CVSS 8.8 (high), 2024-04-03: A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated,…
CVE-2023-20053 - CVSS 6.1 (medium), 2023-03-01: A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2023-20014 - CVSS 7.5 (high), 2023-03-01: A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2022-20907 - CVSS 6.7 (medium), 2022-07-22: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These…
CVE-2022-20913 - CVSS 6.5 (medium), 2022-07-22: A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is…
CVE-2022-20906 - CVSS 6.7 (medium), 2022-07-22: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These…
CVE-2022-20909 - CVSS 6.7 (medium), 2022-07-22: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These…
CVE-2022-20908 - CVSS 6.7 (medium), 2022-07-22: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These…
CVE-2022-20860 - CVSS 7.4 (high), 2022-07-21: A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter communications with associated…
CVE-2022-20858 - CVSS 9.8 (critical), 2022-07-21: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container…
CVE-2022-20857 - CVSS 9.8 (critical), 2022-07-21: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container…
CVE-2022-20861 - CVSS 9.8 (critical), 2022-07-21: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container…
CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…