CVE-2019-15984

CVE-2019-15984 describes multiple SQL injection vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM). An authenticated, remote attacker with administrative privileges could exploit these flaws to execute arbitrary SQL commands, leading to high impact on confidentiality, integrity, and availability. While the CVSS score is 7.2 (High), its severity is compounded by co-published authentication bypass vulnerabilities. Although not listed on the KEV catalog, an ExploitDB entry exists, but there is no evidence of active exploitation or significant community discussion.