UM
Product
Ucs Manager
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 4Low 0
Watch
Add Ucs Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3172 | 8.8 | Feb 26 | A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code… Affected: before 3.2\(3n\); 4.0 before 4.0\(4g\) |
| CVE-2020-3119 | 8.8 | Feb 5 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a… Affected: before 3.2\(3m\); 4.0 before 4.0\(4f\) |
| CVE-2020-3173 | 7.8 | Feb 26 | A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying… Affected: before 3.2\(3n\); 4.0 before 4.0\(4c\) |
| CVE-2020-3171 | 7.8 | Feb 26 | A vulnerability in the local management (local-mgmt) CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary… Affected: 4.0(1a)a |
| CVE-2020-3167 | 7.8 | Feb 26 | A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying… Affected: before 3.2\(3n\); 4.0 before 4.0\(4g\) |
| CVE-2020-3120 | 6.5 | Feb 5 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent… Affected: before 3.2\(3m\); 4.0 before 4.0\(4g\) |
| CVE-2021-1397 | 6.1 | May 6 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user… Affected: through 4.1\(3b\) |
| CVE-2025-20296 | 5.4 | Aug 27 | A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS)… Affected: before 4.2\(3p\); 4.3\(2b\) before 4.3\(6a\) |
| CVE-2020-10136 | 5.3 | Jun 2 | IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and… Affected: 3.2(3n)a |
Showing 9