CVE-2019-15978

CVE-2019-15978 describes multiple command injection vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM). An authenticated, remote attacker with administrative privileges could inject arbitrary commands on the underlying operating system. This vulnerability has a CVSS score of 7.2 (HIGH) due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a public exploit (EDB-48020) exists, though there is no evidence of active exploitation or significant community discussion.