PT-2018-8692

Name of the Vulnerable Software and Affected Versions: Cisco Unified Computing System UCS Director versions 6.0 through 6.5 prior to patch 3 Description: A vulnerability in the role-based resource checking functionality could allow an authenticated, remote attacker to view unauthorized informatio...

CVE-2018-0238: Improper Authentication

A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System UCS Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in the UCS Director end-user portal and perform any permitted operations on a...

CVE-2018-0219: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Computing System UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

PT-2018-8680

Name of the Vulnerable Software and Affected Versions: Cisco Unified Computing System UCS Director affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack agains...

CVE-2017-3817: Incorrect Authorization

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System UCS Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.50.1...

PT-2017-16117

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Director versions 5.50.1 through 6.00.0 Description A vulnerability in the role-based resource checking functionality could allow an authenticated, remote attacker to view unauthorized information for any...