Advisories · Technology
Cisco Network Services Orchestrator.
Every CVE that names Cisco Network Services Orchestrator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Cisco Network Services Orchestrator Path Traversal Vulnerability
- Cisco Network Services Orchestrator
- Path traversal
- CVSS 8.8 High
OS command injection in Cisco IOS XR Software and others
- Cisco IOS XR Software
- Cisco Virtual Topology System (VTS)
- Command injection
- CVSS 8.8 High
Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability
- Cisco IOS XR Software
- Cisco Network Services Orchestrator
- Broken access control
- CVSS 7.8 High
A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on th…
- Cisco ConfD
- Cisco ConfD Basic
- Privilege escalation
- CVSS 7.8 High
OS command injection in Cisco ConfD and others
- Cisco ConfD
- Cisco ConfD Basic
- Command injection
- CVSS 7.8 High
External control of a file path in Cisco Network Services Orchestrator
- Cisco Network Services Orchestrator
- Path traversal
- CVSS 4.7 Medium
Open redirect in Cisco Network Services Orchestrator
- Cisco Network Services Orchestrator
- Open redirect
- CVSS 5.5 Medium
Path traversal in Cisco Network Services Orchestrator
- Cisco Network Services Orchestrator
- Path traversal
- CVSS 4.7 Medium
Cisco Network Services Orchestrator Information Disclosure Vulnerability
- Cisco Network Services Orchestrator
- Information disclosure
-
Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability
- Cisco Network Services Orchestrator
- CWE-264