CVE-2019-1975

CVE-2019-1975 affects the web-based interface of Cisco HyperFlex Software. The root cause is insufficient HTML iframe protection, enabling a cross-frame scripting (XFS) attack. An unauthenticated, remote attacker could lure a user to a malicious page containing an HTML iframe, potentially resulti...

CVE-2019-12621

CVE-2019-12621 corresponds to Cisco HyperFlex Static SSL Key Vulnerability. Cisco HyperFlex Software versions prior to 4.0(1a) are affected due to inadequate key management, allowing an unauthenticated, remote attacker to obtain a cluster-specific encryption key and perform a man-in-the-middle at...

CVE-2019-12620

Cisco HyperFlex Software contains a Counter Value Injection vulnerability (CVE-2019-12620) in the statistics collection service. The root cause is insufficient authentication of the statistics collection service, allowing an unauthenticated, remote attacker to inject arbitrary data values, which ...