CVE-2019-15976

🗓️ 06 Jan 2020 07:40:13Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 120 Views🌐 WEB

Multiple vulnerabilities in Cisco DCNM authentication mechanism

Reporter	Title	Published	Views	Family All 24
zdt	Cisco Data Center Network Manager 11.2.1 - (getVmHostData) SQL Injection Exploit	6 Feb 202000:00	–	zdt
BDU FSTEC	The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager system allows a attacker to perform arbitrary actions on the vulnerable device.	29 Jan 202000:00	–	bdu_fstec
Circl	CVE-2019-15976	6 Feb 202000:00	–	circl
Cisco	Cisco Data Center Network Manager Authentication Bypass Vulnerabilities	2 Jan 202016:00	–	cisco
Tenable Nessus	Cisco Data Center Network Manager < 11.3(1) Multiple Vulnerabilities	9 Jan 202000:00	–	nessus
CNVD	Cisco Data Center Network Manager SOAP API Authentication Bypass Vulnerability	3 Jan 202000:00	–	cnvd
Cvelist	CVE-2019-15976 Cisco Data Center Network Manager Authentication Bypass Vulnerabilities	6 Jan 202007:40	–	cvelist
Exploit DB	Cisco Data Center Network Manager 11.2.1 - 'getVmHostData' SQL Injection	6 Feb 202000:00	–	exploitdb
exploitpack	Cisco Data Center Network Manager 11.2.1 - getVmHostData SQL Injection	6 Feb 202000:00	–	exploitpack
HPE Security Bulletins	HPESBST03980 rev.1 - HPE StoreFabric C-series Switches with Cisco Prime Data Center Network Manager (DCNM), Remote Authentication Bypass	28 Feb 202000:00	–	hpe

NVD

Node

cisco data_center_network_managerRange<11.3(1)

[
  {
    "product": "Cisco Data Center Network Manager",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/156239/Cisco-Data-Center-Network-Manager-11.2.1-SQL-Injection.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass

Parameter	Position	Path	Description	CWE
j_username	request body	j_spring_security_check	Authentication bypass by posting credentials to login endpoint to obtain a session	CWE-798
j_password	request body	j_spring_security_check	Authentication bypass by posting credentials to login endpoint to obtain a session	CWE-798
userName	request body	DbAdminWSService/DbAdminWS	SOAP endpoint to add a user (potential backdoor)	CWE-798
password	request body	DbAdminWSService/DbAdminWS	SOAP endpoint to add a user (potential backdoor)	CWE-798
sortType	request body	DbInventoryWSService/DbInventoryWS	SOAP endpoint vulnerability enabling SQL injection via getVmHostData	CWE-798
reportTemplateName	request body	ReportWSService/ReportWS	SOAP surface to save a report template (path creation/vector)	CWE-798
userName	request body	ReportWSService/ReportWS	SOAP surface to save a report template (path creation/vector)	CWE-798
pmInterval	request body	ReportWSService/ReportWS	SOAP surface to save a report template (path creation/vector)	CWE-798
reportTemplateName	request body	ReportWSService/ReportWS	SOAP surface to open a report template (used to load backdoor)	CWE-798
userName	request body	ReportWSService/ReportWS	SOAP surface to open a report template (used to load backdoor)	CWE-798

17 Jun 2026 02:21Current

9.9Critical risk

Vulners AI Score9.9

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.92835

SSVC

CWE-798