Nexus Dashboard vulnerabilities
8 known vulnerabilities in Nexus Dashboard from Cisco. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Cisco Nexus Dashboard: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device. This vulnerability is due to insufficient validation of the contents of a backu
- 8.7 High severity
Cisco Data Center Network Manager: Key Exchange without Entity Authentication
A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices. This vulnerability is due to insufficient SSH host key validation. An attacke
- 8.8 High severity
Cisco Data Center Network Manager: Cross-Site Request Forgery
A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerabi
- 7.5 High severity
Cisco Nexus Dashboard: Uncontrolled Resource Consumption
A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the improper processing of DNS requests. An attacker could exp
- 8.8 High severity
Cisco Nexus Dashboard: Cross-Site Request Forgery
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilit
- 7.4 High severity
Cisco Nexus Dashboard: Improper Certificate Validation
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter communications with associated controllers or view sensitive information. This vulnerability exists because SSL server certificates
- 9.8 Critical severity
Cisco Nexus Dashboard: Missing Authentication for Critical Functionality
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilit
- 9.8 Critical severity
Cisco Nexus Dashboard: Missing Authentication for Critical Functionality
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilit