IM
Product
Integrated Management Controller Supervisor
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 16Medium 5Low 0
Watch
Add Integrated Management Controller Supervisor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1974 | 9.8 | Aug 21 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data… Affected: 2.2.0.0 through 2.2.0.6; 2.1.0.0 |
| CVE-2019-1937 | 9.8 | Aug 21 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data… Affected: 2.2.0.3 through 2.2.0.6 |
| CVE-2019-1935 | 9.8 | Aug 21 | A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote… Affected: 2.2.0.0 through 2.2.0.6; 2.1.0.0 |
| CVE-2019-1907 | 8.8 | Aug 21 | A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to set sensitive configuration values and gain… Affected: before 4.0\(4b\); before 4.0\(2f\) |
| CVE-2019-1865 | 8.8 | Aug 21 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary… Affected: 1.5.0.0 before 1.5\(9g\); 2.0.0.0 before 2.0\(13o\); 3.0.0.0 before 3.0\(4k\); 4.0.0.0 before 4.0\(4b\); 4.0.0.0 before 4.0\(1d\); 4.0.0.0 before 4.0\(2c\) |
| CVE-2019-1864 | 8.8 | Aug 21 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary… Affected: 1.5.0.0 before 1.5\(9g\); 2.0.0.0 before 2.0\(13o\); 3.0.0.0 before 3.0\(4k\); 4.0.0.0 before 4.0\(4b\); 4.0.0.0 before 4.0\(1d\); 4.0.0.0 before 4.0\(2c\) |
| CVE-2017-6619 | 8.8 | Apr 20 | A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote attacker to execute arbitrary commands on an… Affected: 3.0(1c) |
| CVE-2017-6616 | 8.8 | Apr 20 | A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote attacker to execute arbitrary code on an affected… Affected: 3.0(1c) |
| CVE-2019-1863 | 8.1 | Aug 21 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to make unauthorized… Affected: 1.5.0.0 before 1.5\(9g\); 2.0.0.0 before 2.0\(13o\); 3.0.0.0 before 3.0\(4k\); 4.0.0.0 before 4.0\(4b\); 4.0.0.0 before 4.0\(1d\); 4.0.0.0 before 4.0\(2c\) |
| CVE-2019-1883 | 7.8 | Aug 21 | A vulnerability in the command-line interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker with read-only credentials to inject… Affected: 3.0.0.0 before 3.0\(4k\); 4.0.0.0 before 4.0\(4b\); 4.0.0.0 before 4.0\(2f\) |
| CVE-2019-1908 | 7.5 | Aug 21 | A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote… Affected: 2.0.0.0 before 2.0\(13o\); 3.0.0.0 before 3.0\(4k\); 4.0.0.0 before 4.0\(4b\); 4.0.0.0 before 4.0\(2f\) |
| CVE-2019-1900 | 7.5 | Aug 21 | A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web server process to crash, causing… Affected: 4.0.0.0 before 4.0\(2f\) |
| CVE-2019-12634 | 7.5 | Aug 21 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data… Affected: 2.2.0.3 through 2.2.0.6 |
| CVE-2019-1936 | 7.2 | Aug 21 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data… Affected: 2.2.0.0 through 2.2.0.6; 2.1.0.0 |
| CVE-2019-1896 | 7.2 | Aug 21 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands… Affected: 2.0.0.0 before 2.0\(13o\); 3.0.0.0 before 3.0\(4k\); 4.0.0.0 before 4.0\(4b\); 4.0.0.0 before 4.0\(2f\) |
| CVE-2019-1885 | 7.2 | Aug 21 | A vulnerability in the Redfish protocol of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject and execute arbitrary commands with… Affected: 3.0.0.0 before 3.0\(4k\); 4.0.0.0 before 4.0\(4b\); 4.0.0.0 before 4.0\(2f\) |
| CVE-2019-1871 | 7.2 | Aug 21 | A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to cause a denial of… Affected: 3.0.0.0 before 3.0\(4k\); 4.0.0.0 before 4.0\(4b\) |
| CVE-2019-1850 | 7.2 | Aug 21 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary… Affected: 3.0.0.0 before 3.0\(4k\); 4.0.0.0 before 4.0\(4b\); 4.0.0.0 before 4.0\(2f\) |
| CVE-2019-1634 | 7.2 | Aug 21 | A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject… Affected: 1.5.0.0 before 1.5\(9g\); 2.0.0.0 before 2.0\(13o\); 3.0.0.0 before 3.0\(4k\); 4.0.0.0 before 4.0\(4b\); 4.0.0.0 before 4.0\(2f\) |
| CVE-2018-15404 | 6.5 | Oct 5 | A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to cause a… Affected: 2.1(0.0) |
| CVE-2017-6618 | 5.4 | Apr 20 | A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS)… Affected: 3.0(1c) |
| CVE-2017-6617 | 5.4 | Apr 20 | A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an unauthenticated,… Affected: 3.0(1c) |
| CVE-2018-0149 | 4.8 | Jun 7 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow an authenticated,… Affected: 2.1(0.2); 2.2(0.2) |
| CVE-2020-3329 | 4.3 | May 6 | A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could… Affected: 1.1.0.0 before 2.2.1.3 |
| CVE-2015-6399 | – | Dec 15 | The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) allows remote authenticated users to cause a denial of service (IP interface… Affected: 1.0.0.0; 1.0.0.1 |
| CVE-2015-6259 | – | Sep 4 | The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure… Affected: through 1.0.0.0 |
Showing 26