Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Cisco HyperFlex HX-Series 3.5.2f Clear all filters
TI-2019-09421 CVE-2019-12620 · GHSA-33f4-9hr4-253g

Cisco HyperFlex Software Counter Value Injection Vulnerability

Priority LOW 31

A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0065 Published 2019-09-18 Fixed in 3.5.2f CWE-345
TI-2019-01595 CVE-2019-1975 · GHSA-hxvj-9m68-2v8w

Cisco HyperFlex Software Cross-Frame Scripting Vulnerability

Priority LOW 30

A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01206 Published 2019-09-18 Fixed in 3.5.2f CWE-693