IM
Product
Integrated Management Controller
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 7Low 0
Watch
Add Integrated Management Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3470 | 9.8 | Nov 18 | Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root… Affected: 4.0\(1a\) through 4.0\(4l\); 3.0\(1c\) through 3.0\(4q\); 4.0\(1a\) through 4.0\(2l\); 4.1\(1c\) through 4.1\(1f\); 3.0\(1c\) through 3.0\(4q\); before 3.2.11.3; +3 more |
| CVE-2018-15447 | 9.8 | Nov 8 | A vulnerability in the web framework code of Cisco Integrated Management Controller (IMC) Supervisor could allow an unauthenticated, remote attacker to execute arbitrary SQL… Affected: All versions, or not specified |
| CVE-2020-3371 | 8.8 | Nov 6 | A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary code and execute arbitrary commands… Affected: before 3.0\(3e\) |
| CVE-2019-1632 | 8.0 | Jun 20 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request… Affected: All versions, or not specified |
| CVE-2019-1879 | 6.7 | Jun 20 | A vulnerability in the CLI of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to inject arbitrary commands that are executed with root… Affected: All versions, or not specified |
| CVE-2019-1627 | 6.5 | Jun 20 | A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to gain unauthorized access to sensitive user… Affected: All versions, or not specified |
| CVE-2021-1397 | 6.1 | May 6 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user… Affected: before 3.2\(12.4\) |
| CVE-2019-1630 | 5.5 | Jun 20 | A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow,… Affected: All versions, or not specified |
| CVE-2019-1628 | 5.5 | Jun 20 | A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of… Affected: All versions, or not specified |
| CVE-2019-1631 | 5.3 | Jun 20 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially… Affected: All versions, or not specified |
| CVE-2019-1629 | 5.3 | Jun 20 | A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload… Affected: All versions, or not specified |
| CVE-2014-3348 | – | Sep 10 | The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of… Affected: through 2.2.2 |
Showing 12