cisco prime data center network manager - vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) prior to 6.2(1) allows remote malicious users to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can b...

Cisco Prime Data Center Network Manager 5.0\\(3\\)Cisco Prime Data Center Network Manager 5.0\\(2\\)Cisco Prime Data Center Network Manager 4.2\\(3\\)Cisco Prime Data Center Network Manager 4.2\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(5\\)Cisco Prime Data Center Network Manager 5.2\\(2e\\)Cisco Prime Data Center Network Manager 5.2\\(2c\\)Cisco Prime Data Center Network Manager 5.2\\(2b\\)Cisco Prime Data Center Network Manager 5.2\\(2a\\)Cisco Prime Data Center Network Manager 6.1\\(1b\\)Cisco Prime Data Center Network Manager 5.1\\(3u\\)Cisco Prime Data Center Network Manager 5.1\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(3\\)Cisco Prime Data Center Network Manager 6.1\\(1a\\)Cisco Prime Data Center Network Manager 5.2\\(2\\)Cisco Prime Data Center Network Manager 5.1\\(2\\)Cisco Prime Data Center Network Manager 4.1\\(4\\)Cisco Prime Data Center Network Manager 4.1\\(2\\)Cisco Prime Data Center Network Manager

1 EDB exploit

7.8

CVSSv2

DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) prior to 6.2(1) allows remote malicious users to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029.

Cisco Prime Data Center Network Manager Cisco Prime Data Center Network Manager 6.1\\(1a\\)Cisco Prime Data Center Network Manager 5.2\\(2e\\)Cisco Prime Data Center Network Manager 5.2\\(2c\\)Cisco Prime Data Center Network Manager 5.2\\(2b\\)Cisco Prime Data Center Network Manager 5.2\\(2a\\)Cisco Prime Data Center Network Manager 5.2\\(2\\)Cisco Prime Data Center Network Manager 5.0\\(2\\)Cisco Prime Data Center Network Manager 4.2\\(3\\)Cisco Prime Data Center Network Manager 4.2\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(5\\)Cisco Prime Data Center Network Manager 4.1\\(4\\)Cisco Prime Data Center Network Manager 6.1\\(1b\\)Cisco Prime Data Center Network Manager 5.1\\(3u\\)Cisco Prime Data Center Network Manager 5.1\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(3\\)Cisco Prime Data Center Network Manager 5.1\\(2\\)Cisco Prime Data Center Network Manager 5.0\\(3\\)Cisco Prime Data Center Network Manager 4.1\\(2\\)

7.8

CVSSv2

Cisco Prime Data Center Network Manager (DCNM) prior to 6.2(1) allows remote malicious users to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCud80148.

Cisco Prime Data Center Network Manager 6.1\\(1a\\)Cisco Prime Data Center Network Manager 5.2\\(2e\\)Cisco Prime Data Center Network Manager Cisco Prime Data Center Network Manager 5.2\\(2c\\)Cisco Prime Data Center Network Manager 5.0\\(3\\)Cisco Prime Data Center Network Manager 5.0\\(2\\)Cisco Prime Data Center Network Manager 6.1\\(1b\\)Cisco Prime Data Center Network Manager 5.1\\(2\\)Cisco Prime Data Center Network Manager 5.1\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(3\\)Cisco Prime Data Center Network Manager 4.1\\(2\\)Cisco Prime Data Center Network Manager 5.2\\(2\\)Cisco Prime Data Center Network Manager 5.1\\(3u\\)Cisco Prime Data Center Network Manager 4.1\\(5\\)Cisco Prime Data Center Network Manager 4.1\\(4\\)Cisco Prime Data Center Network Manager 5.2\\(2b\\)Cisco Prime Data Center Network Manager 5.2\\(2a\\)Cisco Prime Data Center Network Manager 4.2\\(3\\)Cisco Prime Data Center Network Manager 4.2\\(1\\)

5.5

CVSSv2

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote malicious user to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests wit...

Cisco Prime Data Center Network Manager 6.3\\(1\\)Cisco Prime Data Center Network Manager 10.2 Cisco Prime Data Center Network Manager 7.0\\(1\\)Cisco Prime Data Center Network Manager 7.0\\(2\\)Cisco Prime Data Center Network Manager 7.1\\(1\\)Cisco Prime Data Center Network Manager 10.0 Cisco Prime Data Center Network Manager 6.3\\(2\\)Cisco Prime Data Center Network Manager 10.1 Cisco Prime Data Center Network Manager 10.3\\(1\\)

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and previous versions allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620.

Cisco Prime Data Center Network Manager 6.2\\(3\\)Cisco Prime Data Center Network Manager 6.2\\(1\\)Cisco Prime Data Center Network Manager 6.2\\(5a\\)Cisco Prime Data Center Network Manager 6.2\\(5\\)Cisco Prime Data Center Network Manager 6.3\\(1\\)Cisco Prime Data Center Network Manager Cisco Prime Data Center Network Manager 6.1\\(1\\)Cisco Prime Data Center Network Manager 6.1

10

CVSSv2

Cisco Prime Data Center Network Manager (DCNM) prior to 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote malicious users to execute arbitrary commands via JBoss Application Server Remote Method Invocation (RMI) services, ak...

Cisco Prime Data Center Network Manager 5.2\\(2c\\)Cisco Prime Data Center Network Manager 5.2\\(2b\\)Cisco Prime Data Center Network Manager 5.0\\(2\\)Cisco Prime Data Center Network Manager 4.2\\(3\\)Cisco Prime Data Center Network Manager 6.1\\(1b\\)Cisco Prime Data Center Network Manager 5.1\\(3u\\)Cisco Prime Data Center Network Manager 5.1\\(2\\)Cisco Prime Data Center Network Manager 4.1\\(3\\)Cisco Prime Data Center Network Manager 4.1\\(2\\)Cisco Prime Data Center Network Manager 5.2\\(2a\\)Cisco Prime Data Center Network Manager 5.2\\(2\\)Cisco Prime Data Center Network Manager 4.2\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(5\\)Cisco Prime Data Center Network Manager 4.1\\(4\\)Cisco Prime Data Center Network Manager 6.1\\(1a\\)Cisco Prime Data Center Network Manager 5.2\\(2e\\)Cisco Prime Data Center Network Manager 5.1\\(1\\)Cisco Prime Data Center Network Manager 5.0\\(3\\)

10

CVSSv2

A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote malicious user to upload arbitrary files to any directory of a vulnerable device (aka Path Traversal) and execute those files. This vulnerability affects the following pr...

Cisco Prime Data Center Network Manager 10.0\\(1\\)Cisco Prime Data Center Network Manager 10.2\\(1\\)Cisco Prime Infrastructure 3.3\\(0.0\\)

1 Article

10

CVSSv2

A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote malicious user to access sensitive information or execute arbitrary code with root privileges on an affected system. The ...

Cisco Prime Data Center Network Manager 10.1.0 Cisco Prime Data Center Network Manager 10.1\\(2\\)Cisco Prime Data Center Network Manager 10.1\\(1\\)

10

CVSSv2

A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote malicious user to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or...

Cisco Prime Data Center Network Manager 10.1.0 Cisco Prime Data Center Network Manager 10.1\\(2\\)Cisco Prime Data Center Network Manager 10.1\\(1\\)

1 Github repository

7.8

CVSSv2

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) prior to 7.1(1) allows remote malicious users to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

Cisco Prime Data Center Network Manager Cisco Prime Data Center Network Manager 7.0\\(1\\)Cisco Prime Data Center Network Manager 6.3\\(1\\)Cisco Prime Data Center Network Manager 6.3\\(2\\)

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook