Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Cisco Unified Computing System E-Series Software (UCSE) 2.0(13o) Clear all filters
TI-2019-01485 CVE-2019-1863 · GHSA-m6xp-ghfg-8fj4

Cisco Integrated Management Controller Privilege Escalation Vulnerability

Priority LOW 39

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to make unauthorized changes to the system configuration.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01703 Published 2019-08-21 Fixed in 2.0(13o) CWE-285
TI-2019-01486 CVE-2019-1864 · GHSA-6xq2-48w8-557v

Cisco Integrated Management Controller Command Injection Vulnerability

Priority MEDIUM 45

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privil…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02629 Published 2019-08-21 Fixed in 2.0(13o) CWE-78
TI-2019-01487 CVE-2019-1865 · GHSA-3xrf-vrqp-mvm5

Cisco Integrated Management Controller Command Injection Vulnerability

Priority MEDIUM 46

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privil…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03567 Published 2019-08-21 Fixed in 2.0(13o) CWE-78
TI-2019-01260 CVE-2019-1634 · GHSA-f3wx-h636-9qph

Cisco Integrated Management Controller Command Injection Vulnerability

Priority LOW 39

A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with ro…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02815 Published 2019-08-21 Fixed in 2.0(13o) CWE-78