Cisco Digital Network Architecture Center vulnerabilities

CVE-2023-20059 [MEDIUM] CWE-555 CVE-2023-20059: A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Ce A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an authenticated, remote attacker to view sensitive information in clear text. The attacker must have valid low-privileged user credentials. This vulnerability is due to improper role-based access control (RBAC) with the integration o

CVE-2025-20353 [MEDIUM] CWE-79 CVE-2025-20353: A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauth A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persua

CVE-2020-3466 [MEDIUM] CWE-79 CVE-2020-3466: Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could al Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerabilities exist because the web-based management interface on an affected device does not properly val

CVE-2019-1707 [MEDIUM] CWE-79 CVE-2019-1707: A vulnerability in the web-based management interface of Cisco DNA Center could allow an authenticat A vulnerability in the web-based management interface of Cisco DNA Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interfac

CVE-2025-20223 [MEDIUM] CWE-284 CVE-2025-20223: A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, r A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that belongs to an internal service of an affected device. This vulnerability is due to insufficient enforcement of access control on HTTP requests. An attacker could exploit this vulnerability by

CVE-2023-20183 [MEDIUM] CWE-285 CVE-2023-20183: Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remot Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisor

CVE-2023-20184 [MEDIUM] CWE-285 CVE-2023-20184: Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remot Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisor

CVE-2025-20355 [MEDIUM] CWE-601 CVE-2025-20355: A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance cou A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an

CVE-2025-20346 [MEDIUM] CWE-269 CVE-2025-20346: A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute op A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should require Administrator privileges. The attacker would need valid read-only user credentials. This vulnerability is due to improper role-based access control (RBAC). An attacker could exploit this vulnerability by logging in to an

CVE-2024-20333 [MEDIUM] CWE-285 CVE-2024-20333: A vulnerability in the web-based management interface of Cisco Catalyst Center, formerly Cisco DNA C A vulnerability in the web-based management interface of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to change specific data within the interface on an affected device. This vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by sending a cra

CVE-2021-34782 [MEDIUM] CWE-202 CVE-2021-34782: A vulnerability in the API endpoints for Cisco DNA Center could allow an authenticated, remote attac A vulnerability in the API endpoints for Cisco DNA Center could allow an authenticated, remote attacker to gain access to sensitive information that should be restricted. The attacker must have valid device credentials. This vulnerability is due to improper access controls on API endpoints. An attacker could exploit the vulnerability by sending a sp

CVE-2021-1130 [MEDIUM] CWE-79 CVE-2021-1130: A vulnerability in the web-based management interface of Cisco DNA Center software could allow an au A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An atta

CVE-2022-20630 [MEDIUM] CWE-200 CVE-2022-20630: A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with administrative privileges could exploit this vulnerability by accessing the audit logs throu