[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fW50bnqJMVn_Cwf9Y7ha5pdYD3PbYN6ZUxQVTCATY6yk":3,"g5a-family:cisco\u002Fdata_center_network_manager":164,"g5a-ex:cisco\u002Fdata_center_network_manager@*":165},{"success":4,"data":5},true,{"product":6,"versions":61,"topVulnerabilitiesByEpss":82,"kevVulnerabilities":133,"seoMetadata":142,"meta":161},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":60},"cisco","data_center_network_manager",20,68,2,"2024-11-18",[14,18,20,23,25,28,30,32,35,38,40,42,44,46,48,50,52,54,56,58],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"10.1",{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},"10.2\\(1\\)",4,{"version":24,"cve_count":16,"kev_count":16,"has_kev":17},"10.3\\(1\\)",{"version":26,"cve_count":27,"kev_count":16,"has_kev":17},"10.3\\(1\\)s3",1,{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"10.4\\(1\\)",{"version":31,"cve_count":27,"kev_count":16,"has_kev":17},"10.4\\(1.128\\)",{"version":33,"cve_count":34,"kev_count":16,"has_kev":17},"10.4\\(2\\)",3,{"version":36,"cve_count":37,"kev_count":16,"has_kev":17},"11.0\\(1\\)",5,{"version":39,"cve_count":11,"kev_count":16,"has_kev":17},"11.1\\(1\\)",{"version":41,"cve_count":11,"kev_count":16,"has_kev":17},"11.2\\(1\\)",{"version":43,"cve_count":34,"kev_count":27,"has_kev":4},"11.3\\(1\\)",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"11.3\\\\(1\\\\)",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"11.4\\(1\\)",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"11.5\\(1\\)",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"4.0",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"4.1",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"4.2",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"5.0",{"version":59,"cve_count":27,"kev_count":16,"has_kev":17},"5.2\\(1\\)","Data Center Network Manager by Cisco is a technology product with 20 tracked versions and 68 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},{"version":24,"cve_count":16,"kev_count":16,"has_kev":17},{"version":26,"cve_count":27,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":27,"kev_count":16,"has_kev":17},{"version":33,"cve_count":34,"kev_count":16,"has_kev":17},{"version":36,"cve_count":37,"kev_count":16,"has_kev":17},{"version":39,"cve_count":11,"kev_count":16,"has_kev":17},{"version":41,"cve_count":11,"kev_count":16,"has_kev":17},{"version":43,"cve_count":34,"kev_count":27,"has_kev":4},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":27,"kev_count":16,"has_kev":17},[83,91,97,103,106,111,115,121,126,130],{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":88,"severity":89,"isKev":4,"epssScore":90},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":88,"severity":96,"isKev":4,"epssScore":90},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10",10,"Critical",{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":88,"severity":96,"isKev":17,"epssScore":102},"CVE-2019-15976","Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.","2020-01-06",9.8,0.92835,{"cveId":104,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":88,"severity":96,"isKev":17,"epssScore":105},"CVE-2019-15975",0.85649,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":101,"cvssVersion":88,"severity":96,"isKev":17,"epssScore":110},"CVE-2019-1620","A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in affected DCNM software. An attacker could exploit this vulnerability by uploading specially crafted data to the affected device. A successful exploit could allow the attacker to write arbitrary files on the filesystem and execute code with root privileges on the affected device.","2019-06-27",0.8378,{"cveId":112,"description":113,"publishedDate":109,"cvssScore":101,"cvssVersion":88,"severity":96,"isKev":17,"epssScore":114},"CVE-2019-1619","A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper session management on affected DCNM software. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to gain administrative access on the affected device.",0.82815,{"cveId":116,"description":117,"publishedDate":109,"cvssScore":118,"cvssVersion":88,"severity":119,"isKev":17,"epssScore":120},"CVE-2019-1622","A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls for certain URLs on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download log files and diagnostic information from the affected device.",5.3,"Medium",0.78858,{"cveId":122,"description":123,"publishedDate":100,"cvssScore":124,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":125},"CVE-2019-15980","Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.",7.2,0.4996,{"cveId":127,"description":128,"publishedDate":100,"cvssScore":124,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":129},"CVE-2019-15984","Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.",0.46935,{"cveId":131,"description":99,"publishedDate":100,"cvssScore":87,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":132},"CVE-2019-15977",0.3811,[134,138],{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"severity":89,"isKev":4,"epssScore":90,"cisaVulnName":135,"cisaDateAdded":86,"cisaShortDescription":136,"cisaRequiredAction":137},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"severity":96,"isKev":4,"epssScore":90,"cisaVulnName":139,"cisaDateAdded":94,"cisaShortDescription":140,"cisaRequiredAction":141},"Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"title":143,"metaDescription":144,"keywords":145,"structuredData":146},"Data Center Network Manager by Cisco - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Data Center Network Manager by Cisco covering 20 versions with 68 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Data Center Network Manager vulnerabilities, Data Center Network Manager security, Data Center Network Manager CVE, Cisco Data Center Network Manager, Data Center Network Manager threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Data Center Network Manager KEV, Data Center Network Manager exploited vulnerabilities",{"@context":147,"@type":148,"name":149,"description":144,"url":150,"manufacturer":151,"applicationCategory":155,"softwareVersion":156,"mainEntity":157},"https:\u002F\u002Fschema.org","SoftwareApplication","Data Center Network Manager","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fdata_center_network_manager",{"@type":152,"name":153,"url":154},"Organization","Cisco","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcisco","Security Software","20 versions tracked",{"@type":158,"name":159,"description":160,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Data Center Network Manager Security Vulnerabilities","Security vulnerabilities affecting Data Center Network Manager by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":162,"apiVersion":163},"2026-10-28T17:12:17.190Z","3.0",[],{"rows":166,"total":11,"capped":17,"failed":16},[167,171],{"cveId":84,"name":135,"severity":89,"cvss":87,"added":86,"epss":90,"published":168,"ranges":169,"checked":4,"hits":170,"covers":17},"2023-10-10T14:15:10.883",[],[],{"cveId":92,"name":139,"severity":96,"cvss":95,"added":94,"epss":90,"published":172,"ranges":173,"checked":4,"hits":175,"covers":17},"2021-12-10T10:15:09.143",[174],"before 11.3(1)",[]]