Latest cisco ucs director Vulnerabilities

● CVE-2022-20765
A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to...
Cisco UCS Director<6.6
● CVE-2021-44228
Apache Log4j2 Remote Code Execution Vulnerability
debian/apache-log4j1.2
debian/apache-log4j2
debian/apache-log4j2<=2.13.3-1<=2.7-2<=2.11.1-2
Apple Xcode<13.3
Apache Log4j2
redhat/log4j<2.15.0
and 429 more
● CVE-2020-3464
A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack...
Cisco UCS Director<6.7.4.1
● CVE-2020-3241
Cisco UCS Director<6.7.4.0
● CVE-2020-3329
A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow a read-only authent...
Cisco Integrated Management Controller Supervisor>=1.1.0.0<2.2.1.3
Cisco UCS Director>=5.4.0.0<6.7.4.0
Cisco UCS Director Express for Big Data>=2.0.0.0<3.7.4.0
● CVE-2020-3239
Cisco UCS Director ApplianceStorageUtil unzip Directory Traversal Remote Code Execution Vulnerability
Cisco UCS Director
Cisco UCS Director=6.0.0.0
Cisco UCS Director=6.0.0.1
Cisco UCS Director=6.0.1.0
Cisco UCS Director=6.0.1.1
Cisco UCS Director=6.0.1.2
and 14 more
● CVE-2020-3240
Cisco UCS Director ScriptModuleAddJarPage Directory Traversal Remote Code Execution Vulnerability
Cisco UCS Director
Cisco UCS Director=6.0.0.0
Cisco UCS Director=6.0.0.1
Cisco UCS Director=6.0.1.0
Cisco UCS Director=6.0.1.1
Cisco UCS Director=6.0.1.2
and 14 more
● CVE-2020-3250
Cisco UCS Director downloadFile Directory Traversal Information Disclosure Vulnerability
Cisco UCS Director
Cisco UCS Director=6.0.0.0
Cisco UCS Director=6.0.0.1
Cisco UCS Director=6.0.1.0
Cisco UCS Director=6.0.1.1
Cisco UCS Director=6.0.1.2
and 14 more
● CVE-2020-3247
Cisco UCS Director CopyFileRunnable run Symlink Following Remote Code Execution Vulnerability
Cisco UCS Director
Cisco UCS Director=6.0.0.0
Cisco UCS Director=6.0.0.1
Cisco UCS Director=6.0.1.0
Cisco UCS Director=6.0.1.1
Cisco UCS Director=6.0.1.2
and 14 more
● CVE-2020-3251
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks o...
Cisco UCS Director=6.0.0.0
Cisco UCS Director=6.0.0.1
Cisco UCS Director=6.0.1.0
Cisco UCS Director=6.0.1.1
Cisco UCS Director=6.0.1.2
Cisco UCS Director=6.0.1.3
and 13 more
● CVE-2020-3243
Cisco UCS Director isEnableRestKeyAccessCheckForUser Authentication Bypass Vulnerability
Cisco UCS Director
Cisco UCS Director=6.0.0.0
Cisco UCS Director=6.0.0.1
Cisco UCS Director=6.0.1.0
Cisco UCS Director=6.0.1.1
Cisco UCS Director=6.0.1.2
and 14 more
● CVE-2020-3252
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks o...
Cisco UCS Director=6.0.0.0
Cisco UCS Director=6.0.0.1
Cisco UCS Director=6.0.1.0
Cisco UCS Director=6.0.1.1
Cisco UCS Director=6.0.1.2
Cisco UCS Director=6.0.1.3
and 13 more
● CVE-2019-1935
A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to...
Cisco Integrated Management Controller Supervisor>=2.2.0.0<=2.2.0.6
Cisco Integrated Management Controller Supervisor=2.1.0.0
Cisco UCS Director=6.0.0.0
Cisco UCS Director=6.5.0.0
Cisco UCS Director=6.6.0.0
Cisco UCS Director=6.6.1.0
and 8 more
● CVE-2019-1938
A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass authentication and exe...
Cisco UCS Director=6.7.0.0
Cisco UCS Director=6.7.1.0
Cisco UCS Director Express for Big Data=3.7.0.0
Cisco UCS Director Express for Big Data=3.7.1.0
● CVE-2019-1937
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthe...
Cisco Integrated Management Controller Supervisor>=2.2.0.3<=2.2.0.6
Cisco UCS Director>=6.6.0.0<=6.6.1.0
Cisco UCS Director>=6.7.0.0<=6.7.1.0
Cisco UCS Director=6.7\(0.0.67265\)
Cisco UCS Director Express for Big Data>=3.7.0.0<=3.7.1.0
Cisco UCS Director Express for Big Data=3.6.0.0
● CVE-2019-1974
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthe...
Cisco Integrated Management Controller Supervisor>=2.2.0.0<=2.2.0.6
Cisco Integrated Management Controller Supervisor=2.1.0.0
Cisco UCS Director>=5.5.0.0<=5.5.0.2
Cisco UCS Director>=6.0.0.0<=6.0.1.3
Cisco UCS Director>=6.5.0.0<=6.5.0.3
Cisco UCS Director>=6.6.0.0<=6.6.1.0
and 9 more
● CVE-2019-12634
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthe...
Cisco Integrated Management Controller Supervisor>=2.2.0.3<=2.2.0.6
Cisco UCS Director>=6.7.0.0<=6.7.2.0
Cisco UCS Director=6.6.0.0
Cisco UCS Director=6.6.1.0
Cisco UCS Director Express for Big Data>=3.7.0.0<=3.7.2.0
Cisco UCS Director Express for Big Data=3.6.0.0
and 1 more
● CVE-2018-15406
Cisco UCS Director=6.6
● CVE-2018-15405
A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to access...
Cisco UCS Director=2.1\(0.0\)
Cisco UCS Director=6.6\(1.0\)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203