Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Priority MEDIUM 45

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05326 Published 2020-04-15 No fix listed CWE-20
Priority HIGH 81

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.61516 Published 2020-04-15 No fix listed CWE-20
Priority HIGH 83

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.60947 Published 2020-04-15 No fix listed CWE-20
Priority CRITICAL 87

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.74438 Published 2020-04-15 No fix listed CWE-20
Priority CRITICAL 88

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.75573 Published 2020-04-15 No fix listed CWE-20
Priority CRITICAL 91

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.88374 Published 2020-04-15 No fix listed CWE-20
Priority HIGH 67

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.38693 Published 2020-04-15 No fix listed CWE-20
Priority HIGH 84

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.73566 Published 2020-04-15 No fix listed CWE-20