Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Cisco Unified Computing System Director 6.7.3.0 Clear all filters
TI-2019-01558 CVE-2019-1938 · GHSA-99xv-4fxw-wm5h

Cisco UCS Director and Cisco UCS Director Express for Big Data API Authentication Bypass Vulnerability

Priority MEDIUM 56

A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actio…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04566 Published 2019-08-21 Fixed in 6.7.3.0 CWE-287
TI-2019-01594 CVE-2019-1974 · GHSA-gxx4-r6p9-84cg

Improper authentication in Cisco Unified Computing System Director

Priority MEDIUM 56

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote att…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04491 Published 2019-08-21 Fixed in 6.7.3.0 CWE-287
TI-2019-01555 CVE-2019-1935 · GHSA-c9g8-fgq6-h2wg

Hard-coded credentials in Cisco Unified Computing System Director

Priority CRITICAL 90

A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.83386 Published 2019-08-21 Fixed in 6.7.3.0 CWE-798
TI-2019-01556 CVE-2019-1936 · GHSA-v93p-j269-v6hr

Improper input validation in Cisco Unified Computing System Director

Priority MEDIUM 61

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attac…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.39475 Published 2019-08-21 Fixed in 6.7.3.0 CWE-20
TI-2019-01557 CVE-2019-1937 · GHSA-6j24-rh4h-rq7f

Improper authentication in Cisco Unified Computing System Director

Priority HIGH 81

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote att…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.75863 Published 2019-08-21 Fixed in 6.7.3.0 CWE-287
TI-2019-09434 CVE-2019-12634 · GHSA-rq9c-9fj9-7wh3

Access control flaw in Cisco Unified Computing System Director

Priority MEDIUM 43

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote att…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02046 Published 2019-08-21 Fixed in 6.7.3.0 CWE-264