Cisco Cisco Network Services Orchestrator

• CVE-2021-1132 Medium 5.3 Cisco Network Services Orchestrator Path Traversal Vulnerability 1.6%
• CVE-2022-20655 High 8.8 A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to ins 0.8%
• CVE-2024-20381 High 8.8 Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability 0.6%
• CVE-2024-20389 High 7.8 A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on th 0.2%
• CVE-2024-20326 High 7.8 A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on th 0.3%
• CVE-2024-20366 High 7.8 A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Services Orchestrator (NSO) could allow an authenticated, local attacker to elevat 0.2%
• CVE-2024-20369 Medium 4.7 A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. 0.3%
• CVE-2023-20040 Medium 5.5 A vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to cause a denial of service (DoS) on an affected system that is runni 1.3%
• CVE-2020-3362 Medium 4.7 Cisco Network Services Orchestrator Information Disclosure Vulnerability 0.3%