Vulnerability record · CVE-2012-5417 · published 2 November 2012

CVE-2012-5417: Cisco prime data center network manager permissions and access controls vulnerability

Cisco · Prime Data Center Network Manager

Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to execute arbitrary commands via JBoss Application Server Remote Method Invocation (RMI) services, aka Bug ID CSCtz44924.

10.0 CVSS 2.0 High EPSS 3.1% · top 12.6% CWE-264 · Permissions and access controls

10.0CVSS 2.0 base score

3.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Prime Data Center Network Manager Cisco

References

Link	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-dcnm	Vendor Advisory
http://www.securityfocus.com/bid/56348
http://www.securitytracker.com/id?1027712
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-dcnm	Vendor Advisory
http://www.securityfocus.com/bid/56348
http://www.securitytracker.com/id?1027712

Track CVE-2012-5417 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2015-0666Cisco Prime DCNM fmserver servlet path traversal file readThe fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) is vulnerable to directory traversal, letting a remote attacker …KEVEPSS 40%analysed3 Apr 2015 10.0CVE-2013-5486Cisco Prime DCNM path traversal in processImageSave.jsp enables file writeCisco Prime Data Center Network Manager (DCNM) before 6.2(1) contains a directory traversal flaw in processImageSave.jsp where the chartid parameter …EPSS 76%analysed23 Sep 2013 9.8CVE-2018-0258Cisco Prime file upload servlet path traversal and arbitrary file executionThe Cisco Prime File Upload servlet in Cisco Prime Data Center Network Manager (10.0 and later) and Cisco Prime Infrastructure (all versions) allows …EPSS 48%analysed2 May 2018 9.8CVE-2017-6639Cisco prime data center network manager missing authorization vulnerabilityA vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticate…EPSS 35%8 Jun 2017 9.8CVE-2017-6640Cisco prime data center network manager permissions and access controls vulnerabilityA vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administr…EPSS 11%8 Jun 2017 8.1CVE-2018-0464Cisco prime data center network manager path traversal vulnerabilityA vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks an…EPSS 5.4%5 Oct 2018 7.8CVE-2013-5487Cisco prime data center network manager information exposure vulnerabilityDCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary files via unspecified vecto…EPSS 2.1%23 Sep 2013 7.8CVE-2013-5490Cisco prime data center network manager information exposure vulnerabilityCisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via an XML external entity declarat…EPSS 1.7%23 Sep 2013

Source: NIST National Vulnerability Database (record CVE-2012-5417), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.