Cisco Cisco Unified Computing System (Standalone)
19 CVEs affecting Cisco Cisco Unified Computing System (Standalone). Latest disclosed: 2026-04-01. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-20093 | Critical | 9.8 | 2026-04-01 | A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass… |
CVE-2020-3470 | Critical | 9.8 | 2020-11-18 | Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitr… |
CVE-2026-20094 | High | 8.8 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command i… |
CVE-2025-20261 | High | 8.8 | 2025-06-04 | A vulnerability in the SSH connection handling of Cisco Integrated Management Controller (IMC) for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Se… |
CVE-2024-20295 | High | 8.8 | 2024-04-24 | A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attack… |
CVE-2024-20356 | High | 8.7 | 2024-04-24 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Admini… |
CVE-2025-20317 | High | 7.1 | 2025-08-27 | A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated… |
CVE-2026-20096 | Medium | 6.5 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command… |
CVE-2026-20097 | Medium | 6.5 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitra… |
CVE-2026-20095 | Medium | 6.5 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command… |
CVE-2020-3371 | Medium | 6.3 | 2020-11-06 | A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary code and execut… |
CVE-2026-20085 | Medium | 6.1 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a… |
CVE-2023-20228 | Medium | 6.1 | 2023-08-16 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduc… |
CVE-2025-20342 | Medium | 5.4 | 2025-08-27 | A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an authenticated… |
CVE-2026-20090 | Medium | 4.8 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a st… |
CVE-2026-20089 | Medium | 4.8 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a st… |
CVE-2026-20087 | Medium | 4.8 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a st… |
CVE-2026-20088 | Medium | 4.8 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a st… |
CVE-2021-1397 | Medium | 4.7 | 2021-05-06 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker… |