Network Services Orchestrator
11 CVEs tracked. 2 of them are in CISA KEV.
This hub aggregates every CVE we track for Network Services Orchestrator, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
Network Services Orchestrator CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 1 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 1 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 11 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- High5
- Medium4
Latest CVEs
The 11 most recently published vulnerabilities affecting Network Services Orchestrator.
- CVE-2025-32433Erlang/OTP SSH Vulnerable to Pre-Authentication RCE10.0
- CVE-2021-1132Cisco Network Services Orchestrator Path Traversal Vulnerability5.3
- CVE-2024-20381Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability8.8
- CVE-2024-20366A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Services Orchestrator (NSO) could allow an authenticated, local attacker to ele...7.8
- CVE-2024-20369A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web pa...4.7
- CVE-2023-20040A vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to cause a denial of service (DoS) on an affected system that is ru...5.5
- CVE-2021-44228Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0
- CVE-2021-1572ConfD CLI Secure Shell Server Privilege Escalation Vulnerability7.8
- CVE-2020-3362Cisco Network Services Orchestrator Information Disclosure Vulnerability4.7
- CVE-2018-0463Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability7.5
- CVE-2018-0274A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the root user...8.8
Product grouping is registry-driven, with AI assist and human review. How it works