Ucs Director vulnerabilities | LiveThreat CVE Feed

Product

Ucs Director

by Cisco · last CVE May 27, 2022

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 8High 7Medium 9Low 0

Severity

All severities25 Critical8 High7 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Ucs Director to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-3250	9.8	61%	Apr 15	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct… Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +12 more
CVE-2020-3248	9.8	74%	Apr 15	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct… Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +12 more
CVE-2020-3247	9.8	76%	Apr 15	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct… Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +12 more
CVE-2020-3243	9.8	88%	Apr 15	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct… Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +12 more
CVE-2019-1974	9.8	4%	Aug 21	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data… Affected: 5.5.0.0 through 5.5.0.2; 6.0.0.0 through 6.0.1.3; 6.5.0.0 through 6.5.0.3; 6.6.0.0 through 6.6.1.0; 6.7.0.0 through 6.7.2.0; 6.7(1.1); +1 more
CVE-2019-1938	9.8	5%	Aug 21	A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass… Affected: 6.7.0.0; 6.7.1.0
CVE-2019-1937	9.8	76%	Aug 21	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data… Affected: 6.6.0.0 through 6.6.1.0; 6.7.0.0 through 6.7.1.0; 6.7(0.0.67265)
CVE-2019-1935	9.8	83%	Aug 21	A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote… Affected: 6.0.0.0; 6.5.0.0; 6.6.0.0; 6.6.1.0; 6.7(0.0.67265); 6.7.0.0; +1 more
CVE-2020-3251	8.8	62%	Apr 15	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct… Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +12 more
CVE-2020-3239	8.8	74%	Apr 15	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct… Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +12 more
CVE-2018-0148	8.8	1%	Feb 22	A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Controller (IMC) Supervisor Software could allow an… Affected: 6.5(0.0.65832)
CVE-2020-3249	7.5	24%	Apr 15	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct… Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +12 more
CVE-2019-12634	7.5	2%	Aug 21	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data… Affected: 6.7.0.0 through 6.7.2.0; 6.6.0.0; 6.6.1.0
CVE-2020-3240	7.3	39%	Apr 15	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct… Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +12 more
CVE-2019-1936	7.2	39%	Aug 21	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data… Affected: 6.0.0.0; 6.5.0.0; 6.6.0.0; 6.6.1.0; 6.7(0.0.67265); 6.7.0.0; +1 more
CVE-2020-3241	6.5	2%	Jun 18	A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to perform a path traversal attack on an affected device Affected: before 6.7.4.0
CVE-2020-3252	6.5	5%	Apr 15	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct… Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +12 more
CVE-2018-15405	6.5	2%	Oct 5	A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated,… Affected: 2.1(0.0); 6.6(1.0)
CVE-2018-15406	6.1	1%	Oct 5	A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack… Affected: 6.6
CVE-2019-16003	5.3	1%	Jan 26	A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device Affected: before 6.7.3.1
CVE-2020-3242	4.9	1%	Jun 18	A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with administrative privileges to obtain confidential information from an… Affected: before 6.7.4.0
CVE-2022-20765	4.8	1%	May 27	A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system Affected: before 6.6
CVE-2020-3464	4.8	1%	Aug 17	A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site… Affected: before 6.7.4.1
CVE-2020-3329	4.3	1%	May 6	A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could… Affected: 5.4.0.0 before 6.7.4.0
CVE-2014-0709	–	2%	Feb 22	Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via… Affected: through 4.0.0.2; 4.0.0.0; 4.0.0.1