CVE-2021-1354: Improper Certificate Validation

A vulnerability in the certificate registration process of Cisco Unified Computing System UCS Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager UCSM. This vulnerability is due to improper certificate validation. An attacker...

PT-2016-2116

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software version 1.41a Description The issue is related to a cross-site scripting XSS vulnerability in the management interface. This vulnerability allows remote attackers to inject arbitrary web scri...

CVE-2016-1401: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

PT-2016-1744

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software versions 1.31b and earlier Description The issue allows remote attackers to execute arbitrary OS commands via a crafted HTTP request. This is due to the system's failure to neutralize special...

CVE-2016-1352: Improper Neutralization of Special Elements used in an OS Command

Cisco Unified Computing System UCS Central Software 1.31b and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856...

CVE-2015-6388: Undefined Security Weakness

Cisco Unified Computing System UCS Central software 1.30.1 allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted request, aka Bug ID CSCux33575...

PT-2015-7218

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central software version 1.30.1 Description The issue allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted request. Recommendations For Cisco Unified Computing System UCS...

CVE-2015-6387: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unified Computing System UCS Central Software 1.30.1 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573...

PT-2015-7217

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software version 1.30.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL. Recommendations For Cisco Unified...

PT-2014-3794

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software versions 1.1 and earlier Description The issue allows local users to gain privileges via a CLI copy command in a local-mgmt context. Recommendations For Cisco Unified Computing System UCS...

CVE-2014-0730: Improper Input Validation

Cisco Unified Computing System UCS Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka Bug ID CSCul53128...

PT-2013-1632

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software component affected versions not specified Description The issue is related to the management interface in the Central Software component, which fails to properly validate the identity of...

PT-2013-2965

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central affected versions not specified Description A cross-site scripting XSS issue exists in a Flash component, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1198: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a Flash component in Cisco Unified Computing System UCS Central allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud15430...