Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

network-manager vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2019-10786
network-manager up to and including 1.0.2 allows remote malicious users to execute arbitrary commands via the "execSync()" argument.
Network-manager Project Network-manager
10
CVSSv2
CVE-2013-5486
Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) prior to 6.2(1) allows remote malicious users to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can b...
Cisco Prime Data Center Network Manager 5.0\\(3\\)Cisco Prime Data Center Network Manager 5.0\\(2\\)Cisco Prime Data Center Network Manager 4.2\\(3\\)Cisco Prime Data Center Network Manager 4.2\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(5\\)Cisco Prime Data Center Network Manager 5.2\\(2e\\)Cisco Prime Data Center Network Manager 5.2\\(2c\\)Cisco Prime Data Center Network Manager 5.2\\(2b\\)Cisco Prime Data Center Network Manager 5.2\\(2a\\)Cisco Prime Data Center Network Manager 6.1\\(1b\\)Cisco Prime Data Center Network Manager 5.1\\(3u\\)Cisco Prime Data Center Network Manager 5.1\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(3\\)Cisco Prime Data Center Network Manager 6.1\\(1a\\)Cisco Prime Data Center Network Manager 5.2\\(2\\)Cisco Prime Data Center Network Manager 5.1\\(2\\)Cisco Prime Data Center Network Manager 4.1\\(4\\)Cisco Prime Data Center Network Manager 4.1\\(2\\)Cisco Prime Data Center Network Manager
7.8
CVSSv2
CVE-2013-5487
DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) prior to 6.2(1) allows remote malicious users to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029.
Cisco Prime Data Center Network ManagerCisco Prime Data Center Network Manager 6.1\\(1a\\)Cisco Prime Data Center Network Manager 5.2\\(2e\\)Cisco Prime Data Center Network Manager 5.2\\(2c\\)Cisco Prime Data Center Network Manager 5.2\\(2b\\)Cisco Prime Data Center Network Manager 5.2\\(2a\\)Cisco Prime Data Center Network Manager 5.2\\(2\\)Cisco Prime Data Center Network Manager 5.0\\(2\\)Cisco Prime Data Center Network Manager 4.2\\(3\\)Cisco Prime Data Center Network Manager 4.2\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(5\\)Cisco Prime Data Center Network Manager 4.1\\(4\\)Cisco Prime Data Center Network Manager 6.1\\(1b\\)Cisco Prime Data Center Network Manager 5.1\\(3u\\)Cisco Prime Data Center Network Manager 5.1\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(3\\)Cisco Prime Data Center Network Manager 5.1\\(2\\)Cisco Prime Data Center Network Manager 5.0\\(3\\)Cisco Prime Data Center Network Manager 4.1\\(2\\)
7.8
CVSSv2
CVE-2013-5490
Cisco Prime Data Center Network Manager (DCNM) prior to 6.2(1) allows remote malicious users to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCud80148.
Cisco Prime Data Center Network Manager 6.1\\(1a\\)Cisco Prime Data Center Network Manager 5.2\\(2e\\)Cisco Prime Data Center Network ManagerCisco Prime Data Center Network Manager 5.2\\(2c\\)Cisco Prime Data Center Network Manager 5.0\\(3\\)Cisco Prime Data Center Network Manager 5.0\\(2\\)Cisco Prime Data Center Network Manager 6.1\\(1b\\)Cisco Prime Data Center Network Manager 5.1\\(2\\)Cisco Prime Data Center Network Manager 5.1\\(1\\)Cisco Prime Data Center Network Manager 4.1\\(3\\)Cisco Prime Data Center Network Manager 4.1\\(2\\)Cisco Prime Data Center Network Manager 5.2\\(2\\)Cisco Prime Data Center Network Manager 5.1\\(3u\\)Cisco Prime Data Center Network Manager 4.1\\(5\\)Cisco Prime Data Center Network Manager 4.1\\(4\\)Cisco Prime Data Center Network Manager 5.2\\(2b\\)Cisco Prime Data Center Network Manager 5.2\\(2a\\)Cisco Prime Data Center Network Manager 4.2\\(3\\)Cisco Prime Data Center Network Manager 4.2\\(1\\)
5.5
CVSSv2
CVE-2018-0464
A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote malicious user to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests wit...
Cisco Prime Data Center Network Manager 6.3\\(1\\)Cisco Prime Data Center Network Manager 10.2Cisco Prime Data Center Network Manager 7.0\\(1\\)Cisco Prime Data Center Network Manager 7.0\\(2\\)Cisco Prime Data Center Network Manager 7.1\\(1\\)Cisco Prime Data Center Network Manager 10.0Cisco Prime Data Center Network Manager 6.3\\(2\\)Cisco Prime Data Center Network Manager 10.1Cisco Prime Data Center Network Manager 10.3\\(1\\)
4.3
CVSSv2
CVE-2014-3329
Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and previous versions allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620.
Cisco Prime Data Center Network Manager 6.2\\(3\\)Cisco Prime Data Center Network Manager 6.2\\(1\\)Cisco Prime Data Center Network Manager 6.2\\(5a\\)Cisco Prime Data Center Network Manager 6.2\\(5\\)Cisco Prime Data Center Network Manager 6.3\\(1\\)Cisco Prime Data Center Network ManagerCisco Prime Data Center Network Manager 6.1\\(1\\)Cisco Prime Data Center Network Manager 6.1
NA
CVE-2022-46407
Ericsson Network Manager (ENM), versions before 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to redirection of the submitted request to domain out of control of ENM deployment. The attacker would ...
Ericsson Network Manager
NA
CVE-2022-46408
Ericsson Network Manager (ENM), versions before 22.1, contains a vulnerability in the application Network Connectivity Manager (NCM) where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlin...
Ericsson Network Manager
NA
CVE-2023-39909
Ericsson Network Manager prior to 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access the NCM application.
Ericsson Network Manager
4
CVSSv2
CVE-2021-28488
Ericsson Network Manager (ENM) prior to 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already granted a highly privileged role). Users in the same AMOS authorization group can retrieve managed-network data that was...
Ericsson Network Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook