Unified Computing System Central Software (Cisco) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 18 known versions, newest CVE from 2021-02-04. Vendor: Cisco.
CVEs of Unified Computing System Central Software
- CVE-2021-1354 - CVSS 4.3 (medium), 2021-02-04: A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent…
- CVE-2018-0113 - CVSS 8.8 (high), 2018-02-08: A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the…
- CVE-2018-0094 - CVSS 7.5 (high), 2018-01-18: A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service…
- CVE-2017-12349 - CVSS 5.4 (medium), 2017-11-30: Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting…
- CVE-2017-12348 - CVSS 5.4 (medium), 2017-11-30: Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting…
- CVE-2016-1401 - CVSS 6.1 (medium), 2016-05-21: Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers…
- CVE-2016-1352 - CVSS 9.8 (critical), 2016-04-14: Cisco Unified Computing System (UCS) Central Software 1.3(1b) and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request,…
- CVE-2015-6388 - CVSS 5 (medium), 2015-12-05: Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted…
- CVE-2015-6387 - CVSS 4.3 (medium), 2015-12-05: Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software 1.3(0.1) allows remote attackers to inject arbitrary web…
- CVE-2015-4286 - CVSS 5 (medium), 2015-07-29: The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377.
- CVE-2015-0701 - CVSS 10 (critical), 2015-05-07: Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961.
- CVE-2014-0730 - CVSS 6.8 (medium), 2014-02-22: Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context,…
