Unified Computing System Central Software Security Vulnerabilities and Issues — Unified Computing System Central Software CVE List

Lucene search

CiscoUnified Computing System Central Software

12 matches found

CVE•added 2018/02/08 7:29 a.m.•57 views

CVE-2018-0113

A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting a...

8.8CVSS8.8AI score0.01167EPSS

CVE•added 2016/05/21 1:59 a.m.•49 views

CVE-2016-1401

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250.

6.1CVSS5.9AI score0.00383EPSS

CVE•added 2018/01/18 6:29 a.m.•46 views

CVE-2018-0094

A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate limiting protection for IPv...

7.5CVSS7.4AI score0.01409EPSS

CVE•added 2021/02/04 5:15 p.m.•46 views

CVE-2021-1354

A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate validation. An attack...

4.3CVSS4.3AI score0.00024EPSS

CVE•added 2016/04/14 1:59 a.m.•45 views

CVE-2016-1352

Cisco Unified Computing System (UCS) Central Software 1.3(1b) and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856.

9.8CVSS9.6AI score0.00442EPSS

CVE•added 2014/02/22 9:55 p.m.•40 views

CVE-2014-0730

Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka Bug ID CSCul53128.

6.8CVSS6.8AI score0.0007EPSS

CVE•added 2017/11/30 9:29 a.m.•40 views

CVE-2017-12348

Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs: CSCvf...

5.4CVSS5.3AI score0.00235EPSS

CVE•added 2017/11/30 9:29 a.m.•39 views

CVE-2017-12349

5.4CVSS5.3AI score0.00235EPSS

CVE•added 2015/05/07 1:59 a.m.•37 views

CVE-2015-0701

Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961.

10CVSS7.8AI score0.01071EPSS

CVE•added 2015/12/05 3:59 a.m.•36 views

CVE-2015-6387

Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software 1.3(0.1) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573.

4.3CVSS5.8AI score0.00402EPSS

CVE•added 2015/12/05 3:59 a.m.•34 views

CVE-2015-6388

Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575.

5CVSS6.8AI score0.00274EPSS

CVE•added 2015/07/29 2:59 p.m.•30 views

CVE-2015-4286

The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377.

5CVSS6.8AI score0.00078EPSS