Lucene search

K
CiscoHyperflex Hx Data Platform2.6(1b)

4 matches found

CVE
CVE
added 2019/02/21 7:29 p.m.47 views

CVE-2019-1664

A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the hxter...

8.1CVSS7.9AI score0.00398EPSS
CVE
CVE
added 2019/02/21 7:29 p.m.43 views

CVE-2019-1665

A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient valid...

6.1CVSS5.2AI score0.00124EPSS
CVE
CVE
added 2019/02/21 7:29 p.m.41 views

CVE-2019-1666

A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to retrieve data from the Graphite service. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by sending crafted requests ...

5.3CVSS5.4AI score0.01589EPSS
CVE
CVE
added 2019/02/21 8:0 p.m.40 views

CVE-2019-1667

A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local attacker to write arbitrary data to the Graphite interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit this vulnerability by connecting to the Gr...

4CVSS4AI score0.00028EPSS