CVE-2017-6640

CVE-2017-6640 affects Cisco Prime Data Center Network Manager (DCNM) where a default user account with a static password is not removed after installation. This allows an unauthenticated, remote attacker to log in to the DCNM administrative console and potentially gain root or system-level privil...

CVE-2017-6640: Allocation of Resources Without Limits or Throttling

A vulnerability in Cisco Prime Data Center Network Manager DCNM Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges...

CVE-2017-6639: Missing Authorization

A vulnerability in the role-based access control RBAC functionality of Cisco Prime Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system. The vulnerability is due to the...

Cisco Prime Data Center Network Manager Server Static Credential Vulnerability

A vulnerability in Cisco Prime Data Center Network Manager DCNM Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges...

Cisco Prime Data Center Network Manager Debug Remote Code Execution Vulnerability

A vulnerability in the role-based access control RBAC functionality of Cisco Prime Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system. The vulnerability is due to the...

Cisco Prime Data Center Network Manager < 7.1(1) Directory Traversal Vulnerability

According to its self-reported version number, the Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by a directory traversal vulnerability in the fmserver servlet due to improper validation of user-supplied information. An unauthenticated, remote attacker, usi...

Directory traversal

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241...

CVE-2015-0666

Cisco Prime Data Center Network Manager (DCNM) has a directory traversal vulnerability in the fmserver servlet that allows unauthenticated, remote attackers to read arbitrary files via a crafted pathname. Affected product: DCNM with fmserver servlet; affected version range is DCNM before 7.1(1). ...

CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241...

Cisco Prime Data Center Network Manager 6.x XSS (credentialed check)

According to its self-reported version number, the version of Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by a cross-site scripting vulnerability due to insufficient validation of input parameters by its web server component. Using a specially crafted URL...

CVE-2014-3329

Cross-site scripting XSS vulnerability in the web-server component in Cisco Prime Data Center Network Manager DCNM 6.32 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620...

CVE-2014-3329

Cisco Prime Data Center Network Manager (DCNM) 6.x (including 6.3(2) and earlier) is affected by a cross-site scripting (XSS) vulnerability in the DCNM web-server component. The root cause is insufficient validation of input parameters, which allows a remote attacker to inject arbitrary web scrip...

CVE-2014-3329

Cross-site scripting XSS vulnerability in the web-server component in Cisco Prime Data Center Network Manager DCNM 6.32 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620...

CVE-2013-5486

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute...

CVE-2013-5490

Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID CSCud80148...

Xxe

Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID CSCud80148...

Directory traversal

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute...

Design/Logic Flaw

DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029...

CVE-2013-5487

CVE-2013-5487 affects Cisco Prime Data Center Network Manager (DCNM) DCNM-SAN Server prior to version 6.2(1). The vulnerability permits remote attackers to read arbitrary files. Root cause cited in multiple sources is insecure DownloadServlet handling (lack of authentication and insufficient inpu...

CVE-2013-5490

Cisco Prime DCNM (DCNM) versions prior to 6.2(1) are affected by CVE-2013-5490 due to an XML External Entity (XXE) vulnerability. An unauthenticated, remote attacker could exploit the XXE flaw to read arbitrary text files on the affected system. This issue is part of a set of vulnerabilities disc...