CVE-2019-15976

🗓️ 06 Jan 2020 07:40:13Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 97 Views🌐 WEB

Multiple vulnerabilities in Cisco DCNM authentication mechanism

Reporter	Title	Published	Views	Family All 22
0day.today	Cisco Data Center Network Manager 11.2.1 - (getVmHostData) SQL Injection Exploit	6 Feb 202000:00	–	zdt
BDU FSTEC	The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager system allows a attacker to perform arbitrary actions on the vulnerable device.	29 Jan 202000:00	–	bdu_fstec
Circl	CVE-2019-15976	6 Feb 202000:00	–	circl
Cisco	Cisco Data Center Network Manager Authentication Bypass Vulnerabilities	2 Jan 202016:00	–	cisco
Tenable Nessus	Cisco Data Center Network Manager < 11.3(1) Multiple Vulnerabilities	9 Jan 202000:00	–	nessus
CNVD	Cisco Data Center Network Manager SOAP API Authentication Bypass Vulnerability	3 Jan 202000:00	–	cnvd
Cvelist	CVE-2019-15976 Cisco Data Center Network Manager Authentication Bypass Vulnerabilities	6 Jan 202007:40	–	cvelist
Exploit DB	Cisco Data Center Network Manager 11.2.1 - 'getVmHostData' SQL Injection	6 Feb 202000:00	–	exploitdb
exploitpack	Cisco Data Center Network Manager 11.2.1 - getVmHostData SQL Injection	6 Feb 202000:00	–	exploitpack
NVD	CVE-2019-15976	6 Jan 202008:15	–	nvd

NVD

Node

cisco data_center_network_managerRange<11.3(1)

[
  {
    "product": "Cisco Data Center Network Manager",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/156239/Cisco-Data-Center-Network-Manager-11.2.1-SQL-Injection.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass

Parameter	Position	Path	Description	CWE
sortType	nested	DbInventoryWSService/DbInventoryWS	SQL Injection in getVmHostData via SOAP to DbInventoryWSService/DbInventoryWS leading to potential RCE	CWE-798
j_username	request body	j_spring_security_check	Authentication bypass via POST to j_spring_security_check with crafted credentials	CWE-798
j_password	request body	j_spring_security_check	Authentication bypass via POST to j_spring_security_check with crafted credentials	CWE-798
reportTemplateName	body	ReportWSService/ReportWS	Folder path creation/write via ReportWSService/ReportWS could enable code execution via crafted template (si.jsp)	CWE-798
userName	body	ReportWSService/ReportWS	Folder path creation/write via ReportWSService/ReportWS could enable code execution via crafted template (si.jsp)	CWE-798
userName	body	DbAdminWSService/DbAdminWS	Add backdoor admin user via DbAdminWSService/DbAdminWS	CWE-798
password	body	DbAdminWSService/DbAdminWS	Add backdoor admin user via DbAdminWSService/DbAdminWS	CWE-798
action	query param	serverinfo/ HtmlAdaptor?action=displayServerInfos	Information disclosure of vfs path via serverinfo endpoint	CWE-798

17 Jun 2026 02:21Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.92835

SSVC

CWE-798