Priority LOW 24
A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00234 · Published 2025-08-27 · No fix listed CWE-79
Priority LOW 29
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00831 · Published 2021-05-06 · No fix listed CWE-601
Priority MEDIUM 47
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.28537 · Published 2020-06-02 · No fix listed CWE-290
Priority LOW 38
A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS).
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00898 · Published 2020-02-26 · No fix listed CWE-78
Priority LOW 37
A vulnerability in the local management (local-mgmt) CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00484 · Published 2020-02-26 · No fix listed CWE-78
Priority MEDIUM 44
A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (Do…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01894 · Published 2020-02-26 · No fix listed CWE-20
Priority LOW 36
A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) on an affected dev…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00439 · Published 2020-02-26 · No fix listed CWE-78
Priority LOW 32
A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected d…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.01639 · Published 2020-02-05 · Fixed in 2.3.1.173 CWE-190
Priority MEDIUM 48
A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.04784 · Published 2020-02-05 · Fixed in 9.3(2) CWE-787