CVE-2015-0599: Undefined Security Weakness

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web...

PT-2015-4743

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers affected versions not specified Description The issue is related to the web interface in Cisco Integrated Management Controller, which does n...

PT-2014-8375

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller in Cisco Unified Computing System versions 2.22cA and earlier Description The issue allows local users to obtain shell access via a crafted map-nfs command. Recommendations For versions 2.22cA and earlier...

CVE-2014-8003: Improper Input Validation

Cisco Integrated Management Controller in Cisco Unified Computing System 2.22cA and earlier allows local users to obtain shell access via a crafted map-nfs command, aka Bug ID CSCup05998...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477...

CVE-2014-7996

Cisco UCS Integrated Management Controller CIMC is affected by a CSRF vulnerability (CVE-2014-7996) in its web framework. An unauthenticated, remote attacker can perform a CSRF attack and hijack user sessions. The issue stems from insufficient CSRF protections in CIMC’s web interface. Impact as d...

CVE-2014-7996: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477...

PT-2014-8368

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller in Cisco Unified Computing System affected versions not specified Description A cross-site request forgery CSRF issue in the web framework allows remote attackers to hijack the authentication of arbitrary...

Authentication flaw

Cisco Unified Computing System UCS 1.x before 1.44 and 2.x before 2.02m allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller IMC, aka Bug ID CSCts53746...

CVE-2013-1186: Improper Authentication

Cisco Unified Computing System UCS 1.x before 1.44 and 2.x before 2.02m allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller IMC, aka Bug ID CSCts53746...

PT-2013-2954

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.x before 1.44 Cisco Unified Computing System UCS versions 2.x before 2.02m Description The issue allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco...