UD
Product
Ucs Director
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 7Medium 9Low 0
Watch
Add Ucs Director to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3241 | 6.5 | Jun 18 | A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to perform a path traversal attack on an affected device Affected: before 6.7.4.0 |
| CVE-2020-3252 | 6.5 | Apr 15 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct… Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +12 more |
| CVE-2018-15405 | 6.5 | Oct 5 | A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated,… Affected: 2.1(0.0); 6.6(1.0) |
| CVE-2018-15406 | 6.1 | Oct 5 | A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack… Affected: 6.6 |
| CVE-2019-16003 | 5.3 | Jan 26 | A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device Affected: before 6.7.3.1 |
| CVE-2020-3242 | 4.9 | Jun 18 | A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with administrative privileges to obtain confidential information from an… Affected: before 6.7.4.0 |
| CVE-2022-20765 | 4.8 | May 27 | A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system Affected: before 6.6 |
| CVE-2020-3464 | 4.8 | Aug 17 | A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site… Affected: before 6.7.4.1 |
| CVE-2020-3329 | 4.3 | May 6 | A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could… Affected: 5.4.0.0 before 6.7.4.0 |
Showing 9