CVE-2019-15985

CVE-2019-15985 describes multiple SQL injection vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM). An authenticated, remote attacker with administrative privileges could exploit these flaws to execute arbitrary SQL commands. The vulnerability has a CVSSv3 score of 7.2 (High), indicating a network-based attack with low complexity, requiring high privileges, and leading to high impact on confidentiality, integrity, and availability. There is no public exploit code available (Metasploit, Nuclei, ExploitDB), and there is no evidence of active exploitation or significant community discussion.