What’s Vulnerable › Products

Cisco Network Services Orchestrator vulnerabilities

12 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Cisco Network Services Orchestrator version is affected

Exploited Cisco Network Services Orchestrator vulnerabilities

• CVE-2025-32433 — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability

Latest Cisco Network Services Orchestrator vulnerabilities

• CVE-2025-32433 — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability (CVSS 10.0) — exploited
• CVE-2021-1132 — Cisco Network Services Orchestrator Path Traversal Vulnerability (CVSS 7.5)
• CVE-2022-20655 — (CVSS 8.8)
• CVE-2024-20381 — Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability (CVSS 8.8)
• CVE-2024-20369 — (CVSS 6.1)
• CVE-2024-20366 — (CVSS 7.8)
• CVE-2023-20040 — (CVSS 5.5)
• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability (CVSS 10.0) — exploited
• CVE-2021-1572 — ConfD CLI Secure Shell Server Privilege Escalation Vulnerability (CVSS 7.8)
• CVE-2020-3362 — Cisco Network Services Orchestrator Information Disclosure Vulnerability (CVSS 4.7)
• CVE-2018-0463 — Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2018-0274 — (CVSS 8.8)