Cisco
Cisco Catalyst Center: vulnerabilidades y CVE
Cisco Catalyst Center tiene 26 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE26
Últimos 12 meses4
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20191 | Alta (7.5) | 0.65% | — | 1 jul 2026 | This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the… |
| CVE-2025-20353 | Media (6.1) | 0.22% | — | 13 nov 2025 | A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an… |
| CVE-2025-20349 | Alta (8.8) | 0.36% | — | 13 nov 2025 | A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This vulnerability is due to insufficient… |
| CVE-2025-20346 | Media (4.3) | 0.27% | — | 13 nov 2025 | A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should require Administrator privileges. The attacker would need valid read-only user credentials. This… |
| CVE-2025-20223 | Media (4.7) | 0.27% | — | 7 may 2025 | A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that belongs to an internal service of an affected device. This… |
| CVE-2025-20210 | Alta (7.3) | 0.39% | — | 7 may 2025 | A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability… |
| CVE-2024-20350 | Alta (8.1) | 0.42% | — | 25 sept 2024 | A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the… |
| CVE-2024-20333 | Media (4.3) | 0.36% | — | 27 mar 2024 | A vulnerability in the web-based management interface of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to change specific data within the interface on an affected… |
| CVE-2023-20184 | Media (4.3) | 0.48% | — | 18 may 2023 | Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands… |
| CVE-2023-20183 | Media (4.3) | 0.49% | — | 18 may 2023 | Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands… |
| CVE-2023-20182 | Alta (8.8) | 0.62% | — | 18 may 2023 | Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands… |
| CVE-2023-20059 | Media (6.5) | 0.41% | — | 23 mar 2023 | A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an authenticated, remote attacker to view sensitive information in clear text. The attacker must have… |
| CVE-2023-20055 | Alta (8.8) | 0.74% | — | 23 mar 2023 | A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device. This… |
| CVE-2022-20630 | Media (4.4) | 0.23% | — | 10 feb 2022 | A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information… |
| CVE-2021-34782 | Media (4.3) | 0.78% | — | 6 oct 2021 | A vulnerability in the API endpoints for Cisco DNA Center could allow an authenticated, remote attacker to gain access to sensitive information that should be restricted. The attacker must have valid device credentials.… |
| CVE-2021-1134 | Alta (7.4) | 0.77% | — | 29 jun 2021 | A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The… |
| CVE-2021-1303 | Alta (8.8) | 1.4% | — | 20 ene 2021 | A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of… |
| CVE-2021-1265 | Media (6.5) | 0.92% | — | 20 ene 2021 | A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privilege-level authenticated, remote attacker to obtain the full unmasked running configuration of managed devices. The… |
| CVE-2021-1264 | Alta (8.8) | 3.7% | — | 20 ene 2021 | A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation by the… |
| CVE-2021-1257 | Alta (8.8) | 0.84% | — | 20 ene 2021 | A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to manipulate an authenticated… |
| CVE-2021-1130 | Media (4.8) | 0.82% | — | 13 ene 2021 | A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an… |
| CVE-2020-3466 | Media (6.1) | 0.92% | — | 26 ago 2020 | Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface… |
| CVE-2020-3411 | Alta (7.5) | 2.2% | — | 17 ago 2020 | A vulnerability in Cisco DNA Center software could allow an unauthenticated remote attacker access to sensitive information on an affected system. The vulnerability is due to improper handling of authentication tokens… |
| CVE-2019-15253 | Media (4.8) | 3.1% | — | 5 feb 2020 | A vulnerability in the web-based management interface of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user… |
| CVE-2019-1841 | Alta (8.1) | 2.6% | — | 18 abr 2019 | A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an authenticated, remote attacker to access to internal services without additional authentication. The vulnerability is due to… |
| CVE-2019-1707 | Media (5.4) | 0.88% | — | 11 mar 2019 | A vulnerability in the web-based management interface of Cisco DNA Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.