CVE-2025-20150mediumCWE-209

CVE-2025-20150: fallo de gravedad media en Cisco Nexus Dashboard

Cisco Nexus Dashboard Username Enumeration Vulnerability

Publicada el

Seguir esta CVE+ Monitorear Cisco Nexus Dashboard

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.5%
A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts. This vulnerability is due to the improper handling of LDAP authentication requests. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow an attacker to determine which usernames are valid LDAP user accounts.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Productos afectados
Cisco · Cisco Nexus Dashboard
CVEs relacionadas — Cisco Nexus Dashboard

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-20857CRITICALCisco Nexus Dashboard Unauthorized Access VulnerabilitiesEPSS 1.6%CVE-2022-20858CRITICALCisco Nexus Dashboard Unauthorized Access VulnerabilitiesEPSS 1.3%CVE-2022-20913MEDIUMCisco Nexus Dashboard Arbitrary File Write VulnerabilityEPSS 1.1%CVE-2023-20014HIGHCVE-2023-20014EPSS 1.0%CVE-2022-20861CRITICALCisco Nexus Dashboard Unauthorized Access VulnerabilitiesEPSS 0.6%CVE-2025-20344MEDIUMCisco Nexus Dashboard Path Traversal VulnerabilityEPSS 0.6%