UC
Product
Unified Computing System
116
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 30Medium 35Low 0
Watch
Add Unified Computing System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1630 | 5.5 | Jun 20 | A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow,… Affected: 4.0(1c)hs3 |
| CVE-2019-1628 | 5.5 | Jun 20 | A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of… Affected: 4.0(1c)hs3 |
| CVE-2019-1725 | 5.5 | Apr 18 | A vulnerability in the local management CLI implementation for specific commands on the Cisco UCS B-Series Blade Servers could allow an authenticated, local attacker to overwrite… Affected: before 4.0\(2a\) |
| CVE-2020-26062 | 5.3 | Nov 18 | A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application Affected: 3.2(1d); 3.2(2b); 3.2(2c); 3.2(2d); 3.2(2e); 3.2(2f); +34 more |
| CVE-2021-1590 | 5.3 | Aug 25 | A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to… Affected: before 4.0\(4m\); 4.1 before 4.1\(3d\) |
| CVE-2020-10136 | 5.3 | Jun 2 | IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and… Affected: All versions, or not specified |
| CVE-2019-1631 | 5.3 | Jun 20 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially… Affected: 4.0(1c)hs3 |
| CVE-2019-1629 | 5.3 | Jun 20 | A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload… Affected: 4.0(1c)hs3 |
| CVE-2026-20090 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2026-20089 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2026-20087 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2026-20088 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2017-12332 | 4.4 | Nov 30 | A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary locations Affected: 7.0(0)hsk(0.357) |
| CVE-2017-6602 | 4.4 | Apr 7 | A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security… Affected: 3.1(1k)a |
| CVE-2021-1592 | 4.3 | Aug 25 | A vulnerability in the way Cisco UCS Manager software handles SSH sessions could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an… Affected: 4.0 before 4.0\(4m\); 4.1 before 4.1\(3e\) |
| CVE-2017-12336 | 4.2 | Nov 30 | A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the interactive TCL shell and gain… Affected: 7.0(0)hsk(0.357) |
| CVE-2015-6415 | – | Dec 12 | Cisco Unified Computing System (UCS) 2.2(3f)A on Fabric Interconnect 6200 devices allows remote attackers to cause a denial of service (CPU consumption or device outage) via a SYN… Affected: 2.2(3f)a |
| CVE-2015-6355 | – | Nov 4 | The web interface in Cisco Unified Computing System (UCS) 2.2(5b)A on blade servers allows remote attackers to obtain potentially sensitive version information by visiting an… Affected: 2.2(5b)a |
| CVE-2015-4279 | – | Jul 20 | The Manager component in Cisco Unified Computing System (UCS) 2.2(3b) on B Blade Server devices allows local users to gain privileges for executing arbitrary CLI commands by… Affected: 2.2(3b) |
| CVE-2015-4259 | – | Jul 10 | The Integrated Management Controller on Cisco Unified Computing System (UCS) C servers with software 1.5(3) and 1.6(0.16) has a default SSL certificate, which makes it easier for… Affected: 1.5(3); 1.6(0.16) |
| CVE-2015-4183 | – | Jun 17 | Cisco UCS Central Software 1.2(1a) allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795 Affected: 1.2(1a) |
| CVE-2015-0633 | – | Feb 26 | The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access… Affected: 1.4; 1.4(1c); 1.4(2); 1.4(3c)1; 1.4(3c)2; 1.4(3j); +17 more |
| CVE-2015-0599 | – | Feb 3 | The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System (UCS) on C-Series Rack Servers does not properly restrict use of IFRAME elements,… Affected: All versions, or not specified |
| CVE-2014-8009 | – | Dec 10 | The Management subsystem in Cisco Unified Computing System 2.1(3f) and earlier allows remote attackers to obtain sensitive information by reading log files, aka Bug ID CSCur99239 Affected: through 2.1\(3f\) |
| CVE-2014-8003 | – | Dec 10 | Cisco Integrated Management Controller in Cisco Unified Computing System 2.2(2c)A and earlier allows local users to obtain shell access via a crafted map-nfs command, aka Bug ID… Affected: through 2.2\(2c\)a |
| CVE-2014-7996 | – | Nov 18 | Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack… Affected: All versions, or not specified |
| CVE-2013-5550 | – | Oct 22 | The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via crafted command parameters that trigger… Affected: All versions, or not specified |
| CVE-2012-4115 | – | Oct 21 | The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM virtual-media data, which allows man-in-the-middle attackers to obtain sensitive… Affected: All versions, or not specified |
| CVE-2012-4117 | – | Oct 19 | The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 certificates, which allows man-in-the-middle attackers to watch SSL KVM… Affected: All versions, or not specified |
| CVE-2012-4116 | – | Oct 19 | The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM media traffic, which allows remote attackers to obtain sensitive information, and… Affected: All versions, or not specified |
| CVE-2012-4114 | – | Oct 19 | The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows man-in-the-middle attackers to watch KVM display content by… Affected: All versions, or not specified |
| CVE-2012-4113 | – | Oct 19 | The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and read arbitrary files via crafted command parameters within the… Affected: All versions, or not specified |
| CVE-2012-4112 | – | Oct 19 | The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary commands via crafted command… Affected: All versions, or not specified |
| CVE-2012-4108 | – | Oct 13 | The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary operating-system commands via crafted… Affected: All versions, or not specified |
| CVE-2012-4107 | – | Oct 13 | The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary commands via crafted parameters to a… Affected: All versions, or not specified |
| CVE-2012-4106 | – | Oct 13 | The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, which allows local users to gain privileges… Affected: All versions, or not specified |
| CVE-2012-4105 | – | Oct 13 | The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (component crash) via crafted "debug hardware"… Affected: All versions, or not specified |
| CVE-2012-4084 | – | Oct 5 | Cross-site request forgery (CSRF) vulnerability in the web-management interface in the fabric interconnect (FI) component in Cisco Unified Computing System (UCS) allows remote… Affected: All versions, or not specified |
| CVE-2012-4136 | – | Oct 3 | The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service to the management interface,… Affected: All versions, or not specified |
| CVE-2012-4111 | – | Oct 2 | The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an… Affected: All versions, or not specified |
| CVE-2012-4110 | – | Oct 2 | run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter,… Affected: All versions, or not specified |
| CVE-2012-4109 | – | Oct 2 | The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified… Affected: All versions, or not specified |
| CVE-2012-4104 | – | Oct 2 | Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or… Affected: All versions, or not specified |
| CVE-2012-4103 | – | Oct 2 | ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter,… Affected: All versions, or not specified |
| CVE-2012-4102 | – | Oct 2 | The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an… Affected: All versions, or not specified |
| CVE-2012-4095 | – | Oct 2 | The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, and read or modify arbitrary files, via… Affected: All versions, or not specified |
| CVE-2012-4096 | – | Oct 1 | The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and modify arbitrary… Affected: All versions, or not specified |
| CVE-2012-1313 | – | Sep 27 | The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID… Affected: All versions, or not specified |
| CVE-2012-4092 | – | Sep 26 | The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows… Affected: All versions, or not specified |
| CVE-2012-4088 | – | Sep 26 | The FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an unspecified user account, which makes it easier for remote attackers to read or modify files… Affected: All versions, or not specified |