The vulnerability of the REST API interface for controlling physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows a attacker to execute arbitrary code.

A REST API input validation flaw in Cisco UCS Director allows code execution via crafted requests.

Reporter	Title	Published	Views	Family All 11
Cisco	Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data	15 Apr 202016:00	–	cisco
Tenable Nessus	Cisco UCS Director and Cisco UCS Director Express for Big Data Multiple Vuulnerabilities (cisco-sa-ucsd-mult-vulns-UNfpdW4E)	21 Apr 202000:00	–	nessus
CNVD	Cisco UCS Director and Cisco UCS Director Express for Big Data Path Traversal Vulnerability	16 Apr 202000:00	–	cnvd
Check Point Advisories	Cisco UCS Director Directory Traversal (CVE-2020-3251)	31 May 202000:00	–	checkpoint_advisories
CVE	CVE-2020-3251	15 Apr 202020:11	–	cve
Cvelist	CVE-2020-3251 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data	15 Apr 202020:11	–	cvelist
NVD	CVE-2020-3251	15 Apr 202021:15	–	nvd
Prion	Directory traversal	15 Apr 202021:15	–	prion
Source Incite	SRC-2020-0013 : Cisco UCS Director MyCallable call Directory Traversal Remote Code Execution Vulnerability	8 Jan 202000:00	–	srcincite
ThreatPost	Cisco IP Phone Harbors Critical RCE Flaw	16 Apr 202018:49	–	threatpost