Cisco Data Center Network Manager vulnerabilities | LiveThreat CVE Feed

Product

Cisco Data Center Network Manager

by Cisco · last CVE Aug 27, 2025

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities15 In the news0 Timeline

Severity mix

Critical 0High 9Medium 6Low 0

Severity

All severities15 Critical0 High9 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Cisco Data Center Network Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-20536	8.8	1%	Nov 6	Cisco Nexus Dashboard Fabric Controller SQL Injection Vulnerability Affected: 12.1.2e; 12.1.2p; 12.1.3b
CVE-2024-20449	8.8	1%	Oct 2	Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability Affected: 12.1(1); 12.0.1a; 12.0.2d; 12.0.2f; 12.1.1; 12.1.1e; +5 more
CVE-2024-20432	8.8	1%	Oct 2	Cisco Nexus Dashboard Fabric Controller Web UI Command Injection Vulnerability Affected: 12.1(1); 12.0.1a; 12.0.2d; 12.0.2f; 12.1.1; 12.1.1e; +5 more
CVE-2024-20281	8.8	0%	Apr 3	A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct… Affected: 12.1(1); 12.1.1e; 12.1.2e; 12.1.3b; 12.0.1a; 12.0.2d; +1 more
CVE-2025-20163	8.7	0%	Jun 4	Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability Affected: 11.2(1); 7.0(2); 10.3(2)IPFM; 10.1(1); 7.2(3); 7.2(2); +33 more
CVE-2024-20490	8.6	0%	Oct 2	Cisco Nexus Dashboard Fabric Controller and Nexus Dashboard Orchestrator Information Disclosure Vulnerability Affected: 12.1.1e; 12.1.1p; 12.1.2e; 12.1.2p; 12.1.3b; 12.2.1; +1 more
CVE-2024-20448	8.6	0%	Oct 2	Cisco Nexus Dashboard Fabric Controller Credential Information Disclosure Vulnerability Affected: 11.2(1); 7.0(2); 10.3(2)IPFM; 10.1(1); 7.2(3); 7.2(2); +32 more
CVE-2020-3538	8.1	1%	Nov 18	Cisco Data Center Network Manager Path Traversal Vulnerability Affected: All versions, or not specified
CVE-2024-20348	7.5	1%	Apr 3	A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read… Affected: 12.1.3b
CVE-2024-20441	6.5	0%	Oct 2	Cisco Nexus Dashboard Fabric Controller Unauthorized API Endpoint Vulnerability Affected: 12.1(1); 12.0.1a; 12.0.2d; 12.0.2f; 12.1.1; 12.1.1e; +5 more
CVE-2020-3539	6.3	0%	Nov 18	Cisco Data Center Network Manager Authorization Bypass Vulnerability Affected: All versions, or not specified
CVE-2024-20444	5.5	1%	Oct 2	Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability Affected: 11.2(1); 7.0(2); 10.3(2)IPFM; 10.1(1); 7.2(3); 7.2(2); +32 more
CVE-2025-20347	5.4	0%	Aug 27	Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability Affected: 11.2(1); 7.0(2); 10.3(2)IPFM; 10.1(1); 7.2(3); 7.2(2); +34 more
CVE-2024-20477	5.4	0%	Oct 2	Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Endpoint Vulnerability Affected: 12.1(1); 12.0.1a; 12.0.2d; 12.0.2f; 12.1.1; 12.1.1e; +5 more
CVE-2024-20438	5.4	0%	Oct 2	Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability Affected: 12.1(1); 12.0.1a; 12.0.2d; 12.0.2f; 12.1.1; 12.1.1e; +5 more