Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

unified computing system director vulnerabilities and exploits

(subscribe to this query)
9.4
CVSSv2
CVE-2015-6259
The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor prior to 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) prior to 5.2.0.1 allows remote malicious users to write to arbitrary files via crafted HTTP reque...
Cisco Integrated Management Controller SupervisorCisco Unified Computing System Director 4.0 BaseCisco Unified Computing System Director 5.0.0.0Cisco Unified Computing System DirectorCisco Unified Computing System Director 5.0.0.1Cisco Unified Computing System Director 5.0.0.2Cisco Unified Computing System Director 5.0.0.3Cisco Unified Computing System Director 5.1.0.1Cisco Unified Computing System Director 3.4 BaseCisco Unified Computing System Director 4.1 BaseCisco Unified Computing System Director 5.1.0.0
4.6
CVSSv2
CVE-2017-3801
A vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an authenticated, local malicious user to execute arbitrary workflow items with just an end-user profile, a Privilege Escalation Vulnerability. The vulnerability is due to improper role-bas...
Cisco Unified Computing System Director 6.0.0.0Cisco Unified Computing System Director 6.0.0.1
4
CVSSv2
CVE-2017-3817
A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authenticated, remote malicious user to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Aff...
Cisco Unified Computing System Director 6.0.0.0Cisco Unified Computing System Director 5.5.0.1
4.3
CVSSv2
CVE-2017-3868
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc4434...
Cisco Unified Computing System Director 6.0\\(0.0\\)
9
CVSSv2
CVE-2018-0238
A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System (UCS) Director could allow an authenticated, remote malicious user to view unauthorized information for any virtual machine in the UCS Director end-user portal and perform any ...
Cisco Unified Computing System Director 6.5\\(0.1\\)Cisco Unified Computing System Director 6.5\\(0.0\\)
4.3
CVSSv2
CVE-2018-0219
A vulnerability in the web-based management interface of Cisco Unified Computing System (UCS) Director could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. ...
Cisco Unified Computing System Director 6.6\\(0.0\\)
7.2
CVSSv2
CVE-2017-12331
A vulnerability in Cisco NX-OS System Software could allow an authenticated, local malicious user to bypass signature verification when loading a software patch. The vulnerability is due to insufficient NX-OS signature verification for software patches. An authenticated, local at...
Cisco Nx-os 8.1\\(1\\)Cisco Unified Computing System 7.0\\(0\\)hsk\\(0.357\\)
4.6
CVSSv2
CVE-2017-12333
A vulnerability in Cisco NX-OS System Software could allow an authenticated, local malicious user to bypass signature verification when loading a software image. The vulnerability is due to insufficient NX-OS signature verification for software images. An authenticated, local att...
Cisco Nx-os 8.1\\(1\\)Cisco Unified Computing System 7.0\\(0\\)hsk\\(0.357\\)
4
CVSSv2
CVE-2018-15404
A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated, remote malicious user to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient ...
Cisco Unified Computing System Director 6.6\\(0.0\\)Cisco Integrated Management Controller Supervisor 2.1\\(0.0\\)
4.9
CVSSv2
CVE-2017-12332
A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local malicious user to write a file to arbitrary locations. The vulnerability is due to insufficient restrictions in the patch installation process. An attacker could exploit this vul...
Cisco Unified Computing System 7.0\\(0\\)hsk\\(0.357\\)Cisco Nx-os 8.1\\(1\\)Cisco Nx-os 8.1\\(0\\)bd\\(0.20\\)
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook