Cisco Cisco Unified Computing System E-series Software (Ucse)

23 CVEs affecting Cisco Cisco Unified Computing System E-series Software (Ucse). Latest disclosed: 2026-04-01. Critical: 1, High: 10.

Top CVEs affecting Cisco Cisco Unified Computing System E-series Software (Ucse)
CVESeverityScorePublishedSummary
CVE-2026-20093Critical9.82026-04-01A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass…
CVE-2026-20094High8.82026-04-01A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command i…
CVE-2024-20295High8.82024-04-24A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attack…
CVE-2019-1864High8.82019-08-21A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to…
CVE-2019-1865High8.82019-08-21A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to…
CVE-2024-20356High8.72024-04-24A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Admini…
CVE-2019-1896High7.22019-08-21A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject a…
CVE-2019-1634High7.22019-08-21A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote at…
CVE-2019-1850High7.22019-08-21A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to…
CVE-2025-20317High7.12025-08-27A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated…
CVE-2019-1883High7.02019-08-21A vulnerability in the command-line interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker with read-only crede…
CVE-2026-20096Medium6.52026-04-01A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command…
CVE-2026-20095Medium6.52026-04-01A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command…
CVE-2019-1863Medium6.52019-08-21A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to…
CVE-2026-20085Medium6.12026-04-01A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a…
CVE-2023-20228Medium6.12023-08-16A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduc…
CVE-2025-20342Medium5.42025-08-27A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an authenticated…
CVE-2026-20090Medium4.82026-04-01A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a st…
CVE-2026-20089Medium4.82026-04-01A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a st…
CVE-2026-20087Medium4.82026-04-01A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a st…