cisco hyperflex hx data platform vulnerabilities and exploits

(subscribe to this query)

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote malicious user to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request....

Cisco Hyperflex Hx Data Platform 5.0 Cisco Hyperflex Hx Data Platform 5.5

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote malicious user to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could ex...

Cisco Hyperflex Hx Data Platform

A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the w...

Cisco Hyperflex Hx Data Platform

A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is ...

Cisco Hyperflex Hx Data Platform 3.0\\(1d\\)Cisco Hyperflex Hx Data Platform 3.0\\(1e\\)Cisco Hyperflex Hx Data Platform 3.0\\(1h\\)Cisco Hyperflex Hx Data Platform 3.0\\(1i\\)Cisco Hyperflex Hx Data Platform 2.6\\(1e\\)Cisco Hyperflex Hx Data Platform 3.0\\(1b\\)Cisco Hyperflex Hx Data Platform 2.6\\(1a\\)Cisco Hyperflex Hx Data Platform 2.6\\(1b\\)Cisco Hyperflex Hx Data Platform 2.6\\(1d\\)Cisco Hyperflex Hx Data Platform 3.0\\(1a\\)Cisco Hyperflex Hx Data Platform 3.0\\(1c\\)

1 Article

A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local malicious user to gain root access to all nodes in the cluster. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability b...

Cisco Hyperflex Hx Data Platform 2.6\\(1e\\)Cisco Hyperflex Hx Data Platform 3.0\\(1a\\)Cisco Hyperflex Hx Data Platform 3.0\\(1b\\)Cisco Hyperflex Hx Data Platform 3.0\\(1c\\)Cisco Hyperflex Hx Data Platform 2.6\\(1a\\)Cisco Hyperflex Hx Data Platform 2.6\\(1d\\)Cisco Hyperflex Hx Data Platform 3.0\\(1d\\)Cisco Hyperflex Hx Data Platform 3.0\\(1h\\)Cisco Hyperflex Hx Data Platform 3.5\\(1a\\)Cisco Hyperflex Hx Data Platform 2.6\\(1b\\)Cisco Hyperflex Hx Data Platform 3.0\\(1e\\)Cisco Hyperflex Hx Data Platform 3.0\\(1i\\)

A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote malicious user to retrieve data from the Graphite service. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by ...

Cisco Hyperflex Hx Data Platform 3.5\\(1a\\)Cisco Hyperflex Hx Data Platform 2.6\\(1a\\)Cisco Hyperflex Hx Data Platform 2.6\\(1d\\)Cisco Hyperflex Hx Data Platform 3.0\\(1d\\)Cisco Hyperflex Hx Data Platform 3.0\\(1h\\)Cisco Hyperflex Hx Data Platform 2.6\\(1e\\)Cisco Hyperflex Hx Data Platform 3.0\\(1a\\)Cisco Hyperflex Hx Data Platform 3.0\\(1b\\)Cisco Hyperflex Hx Data Platform 3.0\\(1c\\)Cisco Hyperflex Hx Data Platform 2.6\\(1b\\)Cisco Hyperflex Hx Data Platform 3.0\\(1e\\)Cisco Hyperflex Hx Data Platform 3.0\\(1i\\)

1 Github repository

A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local malicious user to write arbitrary data to the Graphite interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit this vulnerabilit...

Cisco Hyperflex Hx Data Platform 2.6\\(1a\\)Cisco Hyperflex Hx Data Platform 2.6\\(1b\\)Cisco Hyperflex Hx Data Platform 2.6\\(1e\\)Cisco Hyperflex Hx Data Platform 3.0\\(1b\\)Cisco Hyperflex Hx Data Platform 3.0\\(1c\\)Cisco Hyperflex Hx Data Platform 3.0\\(1d\\)Cisco Hyperflex Hx Data Platform 3.0\\(1e\\)Cisco Hyperflex Hx Data Platform 3.0\\(1h\\)Cisco Hyperflex Hx Data Platform 2.6\\(1d\\)Cisco Hyperflex Hx Data Platform 3.0\\(1a\\)Cisco Hyperflex Hx Data Platform 3.5\\(1a\\)Cisco Hyperflex Hx Data Platform 3.0\\(1i\\)

A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an unauthenticated, adjacent malicious user to execute commands as the root user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by conn...

Cisco Hyperflex Hx Data Platform 3.5\\(1a\\)Cisco Hyperflex Hx Data Platform 3.0\\(1a\\)

A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote malicious user to generate valid, signed session tokens. The vulnerability is due to a static signing key that is present in all Cisco HyperFlex systems. An attacker could exploit this vulnerabilit...

Cisco Hyperflex Hx Data Platform 3.0\\(1a\\)

A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local malicious user to read sensitive information. The vulnerability is due to insufficient cleanup of installation files. An attacker could exploit this vulnerability by access...

Cisco Hyperflex Hx Data Platform 3.0\\(1a\\)

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook