Cisco UCS Director Software and Cisco Integrated Management Controller Supervisor Software Cross-Site Request Forgery Vulnerability

Cisco UCS Director Software and Cisco Integrated Management Controller IMC Supervisor Software are both products of Cisco Corporation.Cisco UCS Director Software is a suite of Cisco Integrated Management Controller IMC Supervisor Software is a set of tools for managing UCS Unified Computing Syste...

CVE-2018-0148

A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Controller IMC Supervisor Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected...

PT-2018-8645

Name of the Vulnerable Software and Affected Versions: Cisco UCS Director Software affected versions not specified Cisco Integrated Management Controller IMC Supervisor Software affected versions not specified Description: A vulnerability in the web-based management interface could allow an...

CVE-2018-0148: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Controller IMC Supervisor Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected...

Cisco Integrated Management Controller User Session Hijacking Vulnerability

According to its self-reported version, the Cisco Unified Computing System Management Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Integrated Management Controller Remote Code Execution Vulnerability

According to its self-reported version, the Cisco Unified Computing System Management Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Integrated Management Controller Privilege Escalation Vulnerability

According to its self-reported version, the Cisco Unified Computing System Management Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

According to its self-reported version, the Cisco Unified Computing System Management Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Integrated Management Controller Hijacked Session Vulnerability

Cisco Integrated Management Controller IMC is the U.S. Cisco Cisco company a set of tools for the management of the UCS Unified Computing System, which supports HTTP, SSH access, etc., and can be on the server, shutdown and reboot operations. A security vulnerability exists in the session...

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

The Cisco Integrated Management Controller is the baseboard management controller that provides embedded server management for Cisco UCS C-Series Rack Servers. Cisco Integrated Management Controller IMC has a security vulnerability in the web-based GUI that can be exploited by remote attackers to...

Cisco Integrated Management Controller Arbitrary Code Execution Vulnerability

Cisco Integrated Management Controller that IMC, is the United States Cisco Cisco company a set of tools for the management of the UCS Unified Computing System, which supports HTTP, SSH access, etc., and can be on the server, shutdown and reboot operations. An arbitrary code execution vulnerabili...

CVE-2017-6618

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker cou...

CVE-2017-6619

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability exists because the affected software does not sufficiently sanitize user-supplied HTTP inpu...

CVE-2017-6616

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an authenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability exists because the affected software does not sufficiently sanitize specific values that are...

Cross site scripting

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker cou...

Design/Logic Flaw

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability exists because the affected software does not sufficiently sanitize user-supplied HTTP inpu...

CVE-2017-6617

A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected...

CVE-2017-6618

The CVE-2017-6618 entry concerns Cisco Integrated Management Controller (IMC) web GUI vulnerability in firmware 3.0(1c). The issue arises from insufficient input validation in the web-based GUI, enabling an authenticated, remote attacker to deliver a cross-site scripting (XSS) attack by convincin...

CVE-2017-6616: Improper Input Validation

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an authenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability exists because the affected software does not sufficiently sanitize specific values that are...

PT-2017-17187

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC version 3.01c Description A vulnerability in the web-based GUI could allow an authenticated, remote attacker to execute arbitrary code on an affected system. The issue exists because the software does...