Cisco Unified Computing System Central Software
12 CVEs affecting Cisco Unified Computing System Central Software. Latest disclosed: 2021-02-04. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-1352 | Critical | 9.8 | 2016-04-14 | Cisco Unified Computing System (UCS) Central Software 1.3(1b) and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request… |
CVE-2018-0113 | High | 8.8 | 2018-02-08 | A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privile… |
CVE-2018-0094 | High | 7.5 | 2018-01-18 | A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (… |
CVE-2016-1401 | Medium | 6.1 | 2016-05-21 | Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers t… |
CVE-2017-12349 | Medium | 5.4 | 2017-11-30 | Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (X… |
CVE-2017-12348 | Medium | 5.4 | 2017-11-30 | Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (X… |
CVE-2021-1354 | Medium | 4.3 | 2021-02-04 | A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacke… |
CVE-2015-6388 | | 2015-12-05 | Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted requ… | |
CVE-2015-6387 | | 2015-12-05 | Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software 1.3(0.1) allows remote attackers to inject arbitrary web scri… | |
CVE-2015-4286 | | 2015-07-29 | The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377. | |
CVE-2015-0701 | | 2015-05-07 | Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961. | |
CVE-2014-0730 | | 2014-02-22 | Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka… |