CVE-2019-15980

CVE-2019-15980 describes multiple directory traversal vulnerabilities in the REST and SOAP API endpoints and Application Framework of Cisco Data Center Network Manager (DCNM). An authenticated, remote attacker with administrative privileges could exploit these flaws to achieve high impact on confidentiality, integrity, and availability. While the CVSS score is 7.2 (HIGH), its severity is exacerbated by co-published authentication bypass vulnerabilities. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.