Cisco Data Center Network Manager Software Content Spoofing Vulnerability

Cisco Data Center Network Manager DCNM Software is a data center management system from Cisco USA. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A content spoofing vulnerability exists in the web interface in Cisco...

Cisco Data Center Network Manager Software Cross-Site Scripting Vulnerability

Cisco Data Center Network Manager DCNM Software is a data center management system from Cisco USA. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A cross-site scripting vulnerability exists in the web-based manageme...

CVE-2017-12344

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

CVE-2017-12344

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

PT-2017-12511

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM Software affected versions not specified Description The issue allows a remote attacker to inject arbitrary values into configuration parameters, redirect a user to a malicious website, inject malicious...

PT-2017-12508

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM Software affected versions not specified Description The issue allows a remote attacker to inject arbitrary values into configuration parameters, redirect a user to a malicious website, inject malicious...

CVE-2017-12345: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

CVE-2017-12346: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

CVE-2017-12344: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

PT-2017-12509

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM Software affected versions not specified Description The issue allows a remote attacker to inject arbitrary values into configuration parameters, redirect a user to a malicious website, inject malicious...

CVE-2017-12343: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

CVE-2017-12347: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

PT-2017-12512

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM Software affected versions not specified Description The issue allows a remote attacker to inject arbitrary values into configuration parameters, redirect a user to a malicious website, inject malicious...

PT-2017-12510

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM Software affected versions not specified Description The issue allows a remote attacker to inject arbitrary values into configuration parameters, redirect a user to a malicious website, inject malicious...

CVE-2011-4650

Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...

CVE-2011-4650

Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...

PT-2017-5026

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager version 5.21 Description: The issue is related to excessive logging during a TCP flood on Java ports, which can cause the server.log file to become very large, leading to increased CPU utilization...

CVE-2011-4650: Undefined Security Weakness

Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...

CVE-2016-6403

The Data in Motion DMo application in Cisco IOS 15.61T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, and CSCuy82912...

Cisco NX-OS Python Scripting Engine Root Access Vulnerability

Cisco NX-OS software is a data center-class operating system that embodies modular design, sustainability, and maintainability. Cisco NX-OS has a security vulnerability that allows a user with locally executable Python scripts to elevate privileges on the Python subsystem and gain root privileges...