Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ucs manager vulnerabilities and exploits

(subscribe to this query)
725
VMScore
CVE-2017-12243
A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local malicious user to obtain root shell privileges on the device, aka Comm...
Cisco Unified Computing System Manager Firmware -Cisco Firepower 9300 Security Appliance Firmware -Cisco Firepower 4100 Next-generation Firewall Firmware -
890
VMScore
CVE-2015-6435
An unspecified CGI script in Cisco FX-OS prior to 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager prior to 2.2(4b), 2.2(5) prior to 2.2(5a), and 3.0 prior to 3.0(2e) allows remote malicious users to execute arbitrary shell commands via a crafted H...
Cisco Firepower Extensible Operating System 1.1.1Cisco Firepower Extensible Operating System 1.1\\(1.160\\)Cisco Firepower Extensible Operating System 1.1\\(1.86\\)Cisco Unified Computing System 3.0\\(1e\\)Cisco Unified Computing System 3.0\\(1d\\)Cisco Unified Computing System 2.2\\(3e\\)Cisco Unified Computing System 2.2\\(3d\\)Cisco Unified Computing System 2.2\\(1f\\)Cisco Unified Computing System 2.2\\(1e\\)Cisco Unified Computing System 2.1\\(1f\\)Cisco Unified Computing System 2.1\\(1e\\)Cisco Unified Computing System 1.3\\(1q\\)Cisco Unified Computing System 1.3\\(1p\\)Cisco Unified Computing System 1.4\\(4i\\)Cisco Unified Computing System 1.4\\(4g\\)Cisco Unified Computing System 1.4\\(4f\\)Cisco Unified Computing System 2.0\\(4d\\)Cisco Unified Computing System 2.0\\(4b\\)Cisco Unified Computing System 2.0\\(2m\\)Cisco Unified Computing System 2.0\\(1x\\)Cisco Unified Computing System 1.2 BaseCisco Unified Computing System 1.1 Base
890
VMScore
CVE-2018-15427
A vulnerability in Cisco Video Surveillance Manager (VSM) Software running on certain Cisco Connected Safety and Security Unified Computing System (UCS) platforms could allow an unauthenticated, remote malicious user to log in to an affected system by using the root account, whic...
Cisco Video Surveillance Manager 7.11Cisco Video Surveillance Manager 7.11.1Cisco Video Surveillance Manager 7.10
641
VMScore
CVE-2016-6402
UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) up to and including 3.0(2d) allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263.
Cisco Unified Computing System 2.2\\(1g\\)Cisco Unified Computing System 2.2\\(1h\\)Cisco Unified Computing System 2.2\\(3d\\)Cisco Unified Computing System 2.2\\(3e\\)Cisco Unified Computing System 3.0\\(1d\\)Cisco Unified Computing System 3.0\\(1e\\)Cisco Unified Computing System 2.2\\(1b\\)Cisco Unified Computing System 2.2\\(1c\\)Cisco Unified Computing System 2.2\\(1d\\)Cisco Unified Computing System 2.2\\(2e\\)Cisco Unified Computing System 2.2\\(3a\\)Cisco Unified Computing System 2.2\\(4b\\)Cisco Unified Computing System 2.2\\(4c\\)Cisco Unified Computing System 2.2 BaseCisco Unified Computing System 2.2\\(2c\\)aCisco Unified Computing System 2.2\\(2c\\)Cisco Unified Computing System 2.2\\(2d\\)Cisco Unified Computing System 2.2\\(3f\\)Cisco Unified Computing System 2.2\\(3g\\)Cisco Unified Computing System 3.0\\(2c\\)Cisco Unified Computing System 3.0\\(2d\\)Cisco Unified Computing System 2.2\\(5b\\)a
1000
VMScore
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
240
VMScore
CVE-2021-1354
A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent malicious user to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certific...
Cisco Unified Computing System Central Software
543
VMScore
CVE-2018-0331
A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an unauthenticated, adjacent malicious user to create a denial of service (DoS) condition. The vulnerab...
Cisco Nx-osCisco Nx-os 6.0Cisco Nx-os 7.0Cisco Nx-os 7.2Cisco Nx-os 8.0Cisco Firepower Extensible Operating SystemCisco Fxos
670
VMScore
CVE-2015-6420
Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Se...
Apache Commons CollectionsApache Commons Collections 4.0
694
VMScore
CVE-2013-1184
The management API in the XML API management service in the Manager component in Cisco Unified Computing System (UCS) 1.x prior to 1.2(1b) allows remote malicious users to cause a denial of service (service outage) via a malformed request, aka Bug ID CSCtg48206.
Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.0\\(2k\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.0Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.1Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.1\\(1m\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.2\\(1\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.2Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.2\\(1a\\)Cisco Unified Computing System Integrated Management Controller -Cisco Unified Computing System 6296up Fabric Interconnect -Cisco Unified Computing System 6120xp Fabric Interconnect -Cisco Unified Computing System 6248up Fabric Interconnect -Cisco Unified Computing System 6140xp Fabric Interconnect -
828
VMScore
CVE-2013-1182
The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) prior to 1.0(2h), 1.1 prior to 1.1(1j), and 1.3(x) allows remote malicious users to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.
Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3\\(1q\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3\\(1p\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3\\(1o\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3\\(1n\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3\\(1y\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3\\(1t\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3\\(1m\\)Cisco Unified Computing System Infrastructure And Unified Computing System SoftwareCisco Unified Computing System Infrastructure And Unified Computing System Software 1.1Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3\\(1w\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3\\(1c\\)Cisco Unified Computing System 6296up Fabric Interconnect -Cisco Unified Computing System 6140xp Fabric Interconnect -Cisco Unified Computing System 6120xp Fabric Interconnect -Cisco Unified Computing System Integrated Management Controller -Cisco Unified Computing System 6248up Fabric Interconnect -
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33228CVE-2024-20361log injectionbypassCVE-2024-4985CVE-2024-35223CVE-2024-29849CVE-2024-31893IMAP
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook