Cisco: >> Prime Data Center Network Manager >> 6.2(1) Security Vulnerabilities
CVE-2015-0666
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
Known exploited
CVSS Score
7.8
EPSS Score
0.718
Published
2015-04-03
Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620.
CVSS Score
4.3
EPSS Score
0.004
Published
2014-07-29