PT-2015-7239

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS version 2.23fA on Fabric Interconnect 6200 devices Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption or device outage, via a SYN flood on the SSH port...

CVE-2015-6415: Undefined Security Weakness

Cisco Unified Computing System UCS 2.23fA on Fabric Interconnect 6200 devices allows remote attackers to cause a denial of service CPU consumption or device outage via a SYN flood on the SSH port during the booting process, aka Bug ID CSCuu81757...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unified Computing System UCS Central Software 1.30.1 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573...

CVE-2015-6387

The CVE-2015-6387 entry refers to a cross-site scripting (XSS) vulnerability in Cisco UCS Central Software (version 1.3(0.1)). The root cause is insufficient input validation in the web interface, allowing an unauthenticated/remote attacker to inject arbitrary script or HTML via a crafted URL. Im...

PT-2015-7218

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central software version 1.30.1 Description The issue allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted request. Recommendations For Cisco Unified Computing System UCS...

PT-2015-7217

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software version 1.30.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL. Recommendations For Cisco Unified...

CVE-2015-6388: Undefined Security Weakness

Cisco Unified Computing System UCS Central software 1.30.1 allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted request, aka Bug ID CSCux33575...

CVE-2015-6387: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unified Computing System UCS Central Software 1.30.1 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573...

Cisco WebEx for Android Security Patch

Cisco has been busy the last two days pushing out a patch and security advisories for a number of its products, including a fix for a remotely exploitable vulnerability in its WebEx Meetings mobile application for Android. Cisco said the vulnerability affects versions prior to 8.5.1 of the app, a...

Cisco Unified Computing System Central Software Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Unified Computing System UCS Central Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to...

Cisco Unified Computing System (5b)A on blade servers information disclosure vulnerability

Cisco Unified Computing System is the U.S. Cisco Cisco company's a set of computing, virtualization and networking in one platform. An information disclosure vulnerability exists in Cisco Unified Computing System 2.25bA on blade servers. This allows remote attackers to obtain potentially sensitiv...

PT-2015-7199

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS version 2.25bA Description The issue allows remote attackers to obtain potentially sensitive version information by visiting an unspecified URL. Recommendations For Cisco Unified Computing System UCS version...

CVE-2015-6355: Exposure of Sensitive Information to an Unauthorized Actor

The web interface in Cisco Unified Computing System UCS 2.25bA on blade servers allows remote attackers to obtain potentially sensitive version information by visiting an unspecified URL, aka Bug ID CSCuw87226...

Cisco Unified Computing System Blade Server Information Disclosure Vulnerability

A vulnerability in the web interface of the Cisco Unified Computing System UCS Blade Server could allow an unauthenticated, remote attacker to obtain information about the UCS software version. The vulnerability is due to the verbose output that is returned when a specific URL is submitted to an...

PT-2015-6490

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS B Blade Server Software versions 2.2.x through 2.2.5 Description The issue allows local users to cause a denial of service, resulting in a host OS or BMC hang, by sending crafted packets over the Inter-IC I2C...

CVE-2015-4265: Undefined Security Weakness

Cisco Unified Computing System UCS B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of service host OS or BMC hang by sending crafted packets over the Inter-IC I2C bus, aka Bug ID CSCuq77241...

Cisco Unified Computing System Director Arbitrary File Write Vulnerability

The Cisco Unified Computing System simplifies IT management and improves agility by integrating unified computing, networking, storage access and virtualization into a single system. A security vulnerability in the Cisco Unified Computing System Director JSP file allows remote attackers to exploi...

PT-2015-1570

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS version 2.23b Description The issue allows local users to gain privileges for executing arbitrary CLI commands by leveraging access to the subordinate fabric interconnect. It exists due to the failure to...

CVE-2015-4279: Improper Neutralization of Special Elements used in an OS Command

The Manager component in Cisco Unified Computing System UCS 2.23b on B Blade Server devices allows local users to gain privileges for executing arbitrary CLI commands by leveraging access to the subordinate fabric interconnect, aka Bug ID CSCut32778...

CVE-2015-4259

Cisco UCS C-Series Servers IMC exposes a default SSL certificate, enabling MITM attacks by an attacker with knowledge of the private key. Affected product: Integrated Management Controller on UCS C servers running 1.5(3) or 1.6(0.16). Root cause: use of a default certificate that bypasses cryptog...