HH
Product
Hyperflex HX Data Platform
On CISA KEVExploited in the wild
15
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 8Low 1
Watch
Add Hyperflex HX Data Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1498 In wildKEV | 9.8 | May 6 | Cisco HyperFlex HX Command Injection Vulnerabilities Affected: before 4.0\(2e\); 4.5 before 4.5\(2a\) |
| CVE-2021-1497 In wildKEV | 9.8 | May 6 | Cisco HyperFlex HX Command Injection Vulnerabilities Affected: before 4.0\(2e\); 4.5 before 4.5\(2a\) |
| CVE-2019-1958 | 8.8 | Aug 8 | A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)… Affected: before 4.0\(2a\) |
| CVE-2018-15380 | 8.8 | Feb 20 | Cisco HyperFlex Software Command Injection Vulnerability Affected: 3.0(1a); 3.5(1a) |
| CVE-2018-15382 | 8.6 | Oct 5 | A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens Affected: 3.0(1a) |
| CVE-2019-1664 | 7.8 | Feb 21 | Cisco HyperFlex Software Unauthenticated Root Access Vulnerability Affected: 2.6(1a); 2.6(1b); 2.6(1d); 2.6(1e); 3.0(1a); 3.0(1b); +6 more |
| CVE-2023-20263 | 6.1 | Sep 6 | A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web… Affected: 5.0; 5.5 |
| CVE-2019-1665 | 6.1 | Feb 21 | Cisco Hyperflex Stored Cross-Site Scripting Vulnerability Affected: 2.6(1a); 2.6(1b); 2.6(1d); 2.6(1e); 3.0(1a); 3.0(1b); +5 more |
| CVE-2017-12315 | 6.0 | Nov 16 | A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information… Affected: 2.6(1a) |
| CVE-2018-15407 | 5.5 | Oct 5 | A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information Affected: 3.0(1a) |
| CVE-2021-1499 | 5.3 | May 6 | A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device Affected: before 4.0\(2e\); 4.5 before 4.5\(2a\) |
| CVE-2019-1666 | 5.3 | Feb 21 | Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability Affected: 2.6(1a); 2.6(1b); 2.6(1d); 2.6(1e); 3.0(1a); 3.0(1b); +6 more |
| CVE-2018-15429 | 5.3 | Oct 5 | A vulnerability in the web-based UI of Cisco HyperFlex HX Data Platform Software could allow an unauthenticated, remote attacker to access sensitive information on an affected… Affected: 2.6(1d); 3.0(1a) |
| CVE-2018-15423 | 4.7 | Oct 5 | A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack Affected: 2.6(1d); 3.0(1a) |
| CVE-2019-1667 | 3.3 | Feb 21 | Cisco HyperFlex Arbitrary Statistics Write Vulnerability Affected: 2.6(1a); 2.6(1b); 2.6(1d); 2.6(1e); 3.0(1a); 3.0(1b); +6 more |
Showing 15