UC
Product
Unified Computing System
116
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 30Medium 35Low 0
Watch
Add Unified Computing System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1879 | 6.7 | Jun 20 | A vulnerability in the CLI of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to inject arbitrary commands that are executed with root… Affected: 4.0(1c)hs3 |
| CVE-2017-12341 | 6.7 | Nov 30 | A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack Affected: 7.0(0)hsk(0.357) |
| CVE-2017-12334 | 6.7 | Nov 30 | A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack Affected: 7.0(0)hsk(0.357) |
| CVE-2017-12333 | 6.7 | Nov 30 | A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image Affected: 7.0(0)hsk(0.357) |
| CVE-2017-12331 | 6.7 | Nov 30 | A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software patch Affected: 7.0(0)hsk(0.357) |
| CVE-2017-12255 | 6.7 | Sep 21 | A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access Affected: 1.5(1c) |
| CVE-2017-6598 | 6.7 | Apr 7 | A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco… Affected: 3.1(1k)a |
| CVE-2024-20294 | 6.6 | Feb 29 | A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a… Affected: 3.1(1e); 3.1(1g); 3.1(1h); 3.1(1k); 3.1(1l); 3.1(2b); +34 more |
| CVE-2019-1736 | 6.6 | Sep 23 | A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass Unified Extensible Firmware Interface (UEFI)… Affected: 3.2(3h)c |
| CVE-2026-20288 | 6.5 | Aug 5 | Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2026-20096 | 6.5 | Apr 1 | Cisco Integrated Management Controller Command Injection Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2026-20097 | 6.5 | Apr 1 | Cisco Integrated Management Controller Remote Code Execution Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2026-20095 | 6.5 | Apr 1 | Cisco Integrated Management Controller Command Injection Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2019-1627 | 6.5 | Jun 20 | A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to gain unauthorized access to sensitive user… Affected: 4.0(1c)hs3 |
| CVE-2017-12335 | 6.3 | Nov 30 | A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack Affected: 7.0(0)hsk(0.357) |
| CVE-2017-12329 | 6.3 | Nov 30 | A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated, local attacker to perform a command… Affected: 7.0(0)hsk(0.357) |
| CVE-2026-20085 | 6.1 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2017-6604 | 6.1 | Apr 7 | A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web… Affected: 2.2(8b); 3.0(1c); 3.1(2c)b |
| CVE-2017-12338 | 6.0 | Nov 30 | A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files Affected: 7.0(0)hsk(0.357) |
| CVE-2019-1630 | 5.5 | Jun 20 | A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow,… Affected: 4.0(1c)hs3 |
| CVE-2019-1628 | 5.5 | Jun 20 | A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of… Affected: 4.0(1c)hs3 |
| CVE-2019-1725 | 5.5 | Apr 18 | A vulnerability in the local management CLI implementation for specific commands on the Cisco UCS B-Series Blade Servers could allow an authenticated, local attacker to overwrite… Affected: before 4.0\(2a\) |
| CVE-2020-26062 | 5.3 | Nov 18 | A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application Affected: 3.2(1d); 3.2(2b); 3.2(2c); 3.2(2d); 3.2(2e); 3.2(2f); +34 more |
| CVE-2021-1590 | 5.3 | Aug 25 | A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to… Affected: before 4.0\(4m\); 4.1 before 4.1\(3d\) |
| CVE-2020-10136 | 5.3 | Jun 2 | IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and… Affected: All versions, or not specified |
| CVE-2019-1631 | 5.3 | Jun 20 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially… Affected: 4.0(1c)hs3 |
| CVE-2019-1629 | 5.3 | Jun 20 | A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload… Affected: 4.0(1c)hs3 |
| CVE-2026-20090 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2026-20089 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2026-20087 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2026-20088 | 4.8 | Apr 1 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability Affected: 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); +34 more |
| CVE-2017-12332 | 4.4 | Nov 30 | A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary locations Affected: 7.0(0)hsk(0.357) |
| CVE-2017-6602 | 4.4 | Apr 7 | A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security… Affected: 3.1(1k)a |
| CVE-2021-1592 | 4.3 | Aug 25 | A vulnerability in the way Cisco UCS Manager software handles SSH sessions could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an… Affected: 4.0 before 4.0\(4m\); 4.1 before 4.1\(3e\) |
| CVE-2017-12336 | 4.2 | Nov 30 | A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the interactive TCL shell and gain… Affected: 7.0(0)hsk(0.357) |
Showing 35