Code injection

2015-09-0401:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.5%

JSON

The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers to write to arbitrary files via crafted HTTP requests, aka Bug IDs CSCus36435 and CSCus62625.

CPENameOperatorVersion
integrated_management_controller_supervisorle1.0.0.0
unified_computing_system_directoreq4.0.0-base
unified_computing_system_directoreq4.1.0-base
unified_computing_system_directoreq5.1.0.0
unified_computing_system_directoreq5.0.0.3
unified_computing_system_directoreq5.0.0.0
unified_computing_system_directoreq5.0.0.2
unified_computing_system_directoreq3.4.0-base
unified_computing_system_directoreq5.1.0.1
unified_computing_system_directorle5.2.0.0

Name	Operator	Version
integrated_management_controller_supervisor	le	1.0.0.0
unified_computing_system_director	eq	4.0.0-base
unified_computing_system_director	eq	4.1.0-base
unified_computing_system_director	eq	5.1.0.0
unified_computing_system_director	eq	5.0.0.3
unified_computing_system_director	eq	5.0.0.0
unified_computing_system_director	eq	5.0.0.2
unified_computing_system_director	eq	3.4.0-base
unified_computing_system_director	eq	5.1.0.1
unified_computing_system_director	le	5.2.0.0