Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

unified computing system central software vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-0701
Cisco UCS Central Software prior to 1.3(1a) allows remote malicious users to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961.
Cisco Unified Computing System Central Software 1.2\\(1a\\)Cisco Unified Computing System Central Software 1.2\\(1d\\)Cisco Unified Computing System Central Software 1.2\\(1e\\)Cisco Unified Computing System Central Software 1.2\\(1f\\)Cisco Unified Computing System Central Software 1.0 BaseCisco Unified Computing System Central Software 1.1 Base
NA
CVE-2015-6388
Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote malicious users to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575.
Cisco Unified Computing System Central Software 1.3\\(0.1\\)
NA
CVE-2014-0730
Cisco Unified Computing System (UCS) Central Software 1.1 and previous versions allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka Bug ID CSCul53128.
Cisco Unified Computing System Central SoftwareCisco Unified Computing System Central Software 1.0
NA
CVE-2015-6387
Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software 1.3(0.1) allows remote malicious users to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573.
Cisco Unified Computing System Central Software 1.3\\(0.1\\)
NA
CVE-2013-1198
Cross-site scripting (XSS) vulnerability in a Flash component in Cisco Unified Computing System (UCS) Central allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud15430.
Cisco Unified Computing System Software -
9.8
CVSSv3
CVE-2016-1352
Cisco Unified Computing System (UCS) Central Software 1.3(1b) and previous versions allows remote malicious users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856.
Cisco Unified Computing System Central Software 1.3\\(0.1\\)
NA
CVE-2015-4286
The web framework in Cisco UCS Central Software 1.3(0.99) allows remote malicious users to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377.
Cisco Unified Computing System Central Software 1.3\\(0.99\\)
6.1
CVSSv3
CVE-2016-1401
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote malicious users to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250.
Cisco Unified Computing System Central Software 1.4\\(1a\\)
7.5
CVSSv3
CVE-2018-0094
A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate li...
Cisco Unified Computing System Central Software 1.4\\(1a\\)
8.8
CVSSv3
CVE-2018-0113
A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote malicious user to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this v...
Cisco Unified Computing System Central Software 1.5\\(1c\\)
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook