Home/Product/cisco network services orchestrator
Product

cisco network services orchestrator

11 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2025-32433
< 5.7.19.1
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.
10.0CRITICAL
 CVE-2021-1132
all versions
A vulnerability in the API subsystem and in the web-management interface of Cisco&nbsp;Network Services Orchestrator (NSO) could a
5.3MEDIUM
 CVE-2024-20381
all versions
A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the w
8.8HIGH
 CVE-2024-20369
>= 5.4 and < 5.5.10.1
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauth
4.7MEDIUM
 CVE-2024-20366
>= 5.0 and < 5.0.5
A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Services Orc
7.8HIGH
 CVE-2023-20040
>= 3.3 and < 5.4.7
A vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker
5.5MEDIUM
 CVE-2021-44228
< 5.3.5.1
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration
10.0CRITICAL
 CVE-2021-1572
>= 5.4 and <= 5.4.3.1
A vulnerability in ConfD could allow an authenticated, local attacker to execute arbitrary commands at the level of the account un
7.8HIGH
 CVE-2020-3362
< 4.7.7.3
A vulnerability in the CLI of Cisco Network Services Orchestrator (NSO) could allow an authenticated, local attacker to access con
4.7MEDIUM
 CVE-2018-0463
all versions
A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator (NSO) could allow an un
7.5HIGH
 CVE-2018-0274
>= 4.1 and <= 4.1.6.0
A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to ex
8.8HIGH
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin