cisco ucs director vulnerabilities and exploits

(subscribe to this query)

9.9

CVSSv3

A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System (UCS) Director could allow an authenticated, remote malicious user to view unauthorized information for any virtual machine in the UCS Director end-user portal and perform any ...

Cisco Unified Computing System Director 6.5\\(0.1\\)Cisco Unified Computing System Director 6.5\\(0.0\\)

1 Article

6.1

CVSSv3

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc4434...

Cisco Unified Computing System Director 6.0\\(0.0\\)

4.8

CVSSv3

A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow an authenticated, remote malicious user to conduct a Document Object Model-based (DOM-based), stored cross-site scriptin...

Cisco Integrated Management Controller Supervisor 2.1\\(0.2\\)Cisco Integrated Management Controller Supervisor 2.2\\(0.2\\)

NA

The Message Transfer Service (MTS) in Cisco NX-OS prior to 6.2(7) on MDS 9000 devices and 6.0 prior to 6.0(2) on Nexus 7000 devices allows remote malicious users to cause a denial of service (NULL pointer dereference and kernel panic) via a large volume of crafted traffic, aka Bu...

Cisco Nx-os 6.0\\(1\\)Cisco Nexus 7000 -Cisco Nexus 7000 10-slot -Cisco Nexus 7000 9-slot -Cisco Nexus 7000 18-slot -Cisco Nx-os Cisco Nx-os 6.2\\(5\\)Cisco Nx-os 6.2\\(3n\\)Cisco Nx-os 6.2\\(1n\\)Cisco Nx-os 6.2\\(3\\)Cisco Nx-os 6.2\\(1\\)Cisco Mds 9100 -Cisco Mds 9000

NA

Cisco NX-OS 6.1 prior to 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud8840...

Cisco Nx-os 6.1\\(4a\\)Cisco Nx-os 6.1\\(4\\)Cisco Nx-os 6.1 Cisco Nx-os 6.1\\(1\\)Cisco Nx-os 6.1\\(3\\)Cisco Nx-os 6.1\\(2\\)Cisco Nexus 7000 -Cisco Nexus 7000 10-slot -Cisco Nexus 7000 18-slot -Cisco Nexus 7000 9-slot -

NA

Cisco NX-OS 5.0 prior to 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629.

NA

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 prior to 1.4(1i), NX-OS 5.0 prior to 5.0(3)U2(2) on Nexus 3000 devices, NX-OS 4.1 prior to 4.1(2)E1(1l) on Nexus 4000 devices, NX-OS 5.x prior to 5.1...

10

CVSSv3

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1145 Github repositories28 Articles

6.5

CVSSv3

A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an unauthenticated, adjacent malicious user to create a denial of service (DoS) condition. The vulnerab...

Cisco Nx-os Cisco Nx-os 6.0 Cisco Nx-os 7.0 Cisco Nx-os 7.2 Cisco Nx-os 8.0 Cisco Firepower Extensible Operating System Cisco Fxos

7.5

CVSSv3

A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.

Apache Http Server Fedoraproject Fedora 34 Fedoraproject Fedora 35 Tenable Tenable.sc Oracle Zfs Storage Appliance Kit 8.8 Oracle Secure Backup

1 Github repository

Get Started

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook