Product by Cisco
Cisco Nexus Dashboard
32 known vulnerabilities in Cisco Nexus Dashboard (Cisco), 1 of them actively exploited (CISA KEV).
Key figures
32
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 74 other products | 10.0 | |
| Critical | CVE-2022-20857 | Cisco Nexus Dashboard Unauthorized Access Vulnerabilities | 9.8 | |
| Critical | CVE-2026-20326 | Cisco Nexus Dashboard: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2026-20325 | Cisco Nexus Dashboard: Command Injection | 9.9 | |
| Critical | CVE-2022-20858 | Cisco Nexus Dashboard Unauthorized Access Vulnerabilities | 9.8 | |
| High | CVE-2026-76409 | Cisco Nexus Dashboard: Path Traversal | 8.8 | |
| Critical | CVE-2026-20322 | Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Control | 9.9 | |
| High | CVE-2026-20360 | Cisco Nexus Dashboard: Exposure of Sensitive Information to an Unauthorized Actor | 8.8 | |
| High | CVE-2026-20361 | Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL Injection | 8.8 | |
| High | CVE-2023-20014 | Cisco Nexus Dashboard: Resource Management Errors | 7.5 | |
| Critical | CVE-2022-20861 | Cisco Nexus Dashboard Unauthorized Access Vulnerabilities | 9.8 | |
| High | CVE-2025-20163 | Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability | 8.7 | |
| High | CVE-2025-20344 | Cisco Nexus Dashboard Path Traversal Vulnerability | 6.5 | |
| Medium | CVE-2022-20913 | Cisco Nexus Dashboard Arbitrary File Write Vulnerability | 4.9 | |
| High | CVE-2022-20860 | Cisco Nexus Dashboard SSL Certificate Validation Vulnerability | 7.4 | |
| Medium | CVE-2026-20174 | Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability | 4.9 | |
| Medium | CVE-2026-20042 | Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability | 6.5 | |
| Medium | CVE-2025-20150 | Cisco Nexus Dashboard Username Enumeration Vulnerability | 5.3 | |
| Medium | CVE-2024-20441 | Cisco Nexus Dashboard Fabric Controller Unauthorized API Endpoint Vulnerability | 5.7 | |
| Medium | CVE-2023-20053 | Cisco Nexus Dashboard: Cross-site Scripting | 6.1 | |
| Medium | CVE-2024-20477 | Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Endpoint Vulnerability | 5.4 | |
| Medium | CVE-2024-20438 | Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability | 6.3 | |
| High | CVE-2024-20281 | Cisco Nexus Dashboard: Cross-Site Request Forgery (CSRF) | 7.5 | |
| Medium | CVE-2024-20442 | Cisco Nexus Dashboard Unauthorized API Endpoints Vulnerability | 5.4 | |
| Medium | CVE-2025-20347 | Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability | 5.4 |
News
- Cisco Nexus Dashboard Configuration Backup REST API Unauthorized Access Vulnerabilitycisco-psirt
- SSA-397453 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUSsiemens-productcert
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert
- Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerabilitycisco-psirt