CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

CVE-2019-16003

CVE-2019-16003 affects Cisco UCS Director Web-based management interface. A flaw in the authentication logic could allow an unauthenticated, remote attacker to download system log files generated by an administrator by sending a crafted request to the web interface. The vulnerability stems from h...

CVE-2022-20765

Cisco UCS Director web applications are vulnerable to Cross-Site Scripting (XSS) due to unsanitized user input. An authenticated, remote attacker could submit crafted JavaScript, potentially rewriting page content, accessing sensitive information stored in the apps, and altering form data. A Cisc...

CVE-2020-3242

CVE-2020-3242 – Cisco UCS Director Information Disclosure : A vulnerability in the REST API could allow an authenticated, remote attacker with administrative privileges to obtain confidential information from an affected device. The issue arises because confidential information is returned as par...

CVE-2020-3241

CVE-2020-3241. A path-traversal vulnerability in Cisco UCS Director’s orchestration tasks arises from insufficient validation of user-supplied input on the web-based management interface. An authenticated, remote attacker could craft a task with specific configuration parameters to overwrite arbi...

CVE-2020-3464

CVE-2020-3464 affects Cisco UCS Director web UI via stored XSS due to improper input validation. The issue requires authenticated, administrative access to exploit, enabling arbitrary script execution or access to browser data in the affected session. Multiple connected records confirm: (1) vulne...