Cisco Cisco Unified Computing System (Management Software)
14 CVEs affecting Cisco Cisco Unified Computing System (Management Software). Latest disclosed: 2020-06-18. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1907 | High | 8.8 | 2019-08-21 | A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to set sensitive configuration… |
CVE-2019-1908 | High | 7.5 | 2019-08-21 | A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (IMC) could allow an unauthent… |
CVE-2019-1900 | High | 7.5 | 2019-08-21 | A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web server proce… |
CVE-2019-1885 | High | 7.2 | 2019-08-21 | A vulnerability in the Redfish protocol of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject and execute arb… |
CVE-2019-1871 | High | 7.2 | 2019-08-21 | A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to… |
CVE-2020-3241 | Medium | 6.5 | 2020-06-18 | A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to perform a path traversal attack on an affecte… |
CVE-2019-1627 | Medium | 6.5 | 2019-06-20 | A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to gain unauthorized acce… |
CVE-2019-1879 | Medium | 6.4 | 2019-06-20 | A vulnerability in the CLI of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to inject arbitrary commands that are e… |
CVE-2019-1630 | Medium | 5.5 | 2019-06-20 | A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to caus… |
CVE-2019-1628 | Medium | 5.5 | 2019-06-20 | A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resu… |
CVE-2019-1631 | Medium | 5.3 | 2019-06-20 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access… |
CVE-2019-1629 | Medium | 5.3 | 2019-06-20 | A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have wri… |
CVE-2020-3242 | Medium | 4.9 | 2020-06-18 | A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with administrative privileges to obtain confidential infor… |
CVE-2019-1632 | Medium | 4.6 | 2019-06-20 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct… |