Cisco Nexus Dashboard vulnerabilities
26 known vulnerabilities affecting cisco/nexus_dashboard.
Total CVEs
26
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL3HIGH6MEDIUM17
Vulnerabilities
Page 2 of 2
CVE-2022-20908P4MEDIUMCVSS 6.7≥ 2.0, < 2.2\(1e\)2022-07-22
CVE-2022-20908 [MEDIUM] CWE-367 CVE-2022-20908: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to el
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executi
nvd
CVE-2022-20906P4MEDIUMCVSS 6.7≥ 2.0, < 2.2\(1e\)2022-07-22
CVE-2022-20906 [MEDIUM] CWE-367 CVE-2022-20906: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to el
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executi
nvd
CVE-2022-20907P4MEDIUMCVSS 6.7≥ 2.0, < 2.2\(1e\)2022-07-22
CVE-2022-20907 [MEDIUM] CWE-367 CVE-2022-20907: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to el
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executi
nvd
CVE-2024-20282P4MEDIUMCVSS 6.0fixed in 3.1(1k)2024-04-03
CVE-2024-20282 [MEDIUM] CWE-269 CVE-2024-20282: A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid res
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device.
This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within t
nvd
CVE-2023-20053P4MEDIUMCVSS 6.1fixed in 2.3\(1c\)2023-03-01
CVE-2023-20053 [MEDIUM] CWE-79 CVE-2023-20053: A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauth
A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.
This vulnerability is due to insufficient user input validation. An attacker could exploit this vulner
nvd
CVE-2024-20283P4MEDIUMCVSS 4.3fixed in 3.1(1k)2024-04-03
CVE-2024-20283 [MEDIUM] CWE-284 CVE-2024-20283: A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn clus
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment information on an affected device.
This vulnerability is due to improper access controls on a specific API endpoint. An attacker could exploit this vulnerability by sending queries to the API endpoint. A successful exploit could allow a
nvd
← Previous2 / 2