unified computing system · threatengine.sh

Home/Product/cisco unified computing system

Product

cisco unified computing system

105 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid

A vulnerability in the Redfish API of Cisco UCS B-Series, Cisco UCS Managed C-Series, and Cisco UCS X-Series Servers could allow a

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unau

>= 4.0 and < 4.0\(4m\)

A vulnerability in the way Cisco UCS Manager software handles SSH sessions could allow an authenticated, remote attacker to cause

A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticate

>= 4.0 and < 4.0\(4k\)

A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an

A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass U

IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is v

A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Softw

A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (

A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to

A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated

A vulnerability in the Redfish protocol of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attac

A vulnerability in the command-line interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, local

A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allow an authe

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an auth

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an auth

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an auth

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an auth

A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC) could allo

A vulnerability in the CLI of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to inject

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticat

A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenti

A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated

A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to

A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attac

A vulnerability in the local management CLI implementation for specific commands on the Cisco UCS B-Series Blade Servers could all

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an auth

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an auth

A vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System (UCS) Software could allow an authe

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command inject

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arb

A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to esca

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command inject

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command inject

A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when

A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to

A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when

A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenti

A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. The vu

A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.0(0.234) could allow an unauthenticated, remote

A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remo

A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewa

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewa

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Serie

A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Nex

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users to obtain

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms a

An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager b

Cisco Unified Computing System (UCS) 2.2(3f)A on Fabric Interconnect 6200 devices allows remote attackers to cause a denial of ser

The web interface in Cisco Unified Computing System (UCS) 2.2(5b)A on blade servers allows remote attackers to obtain potentially

The Manager component in Cisco Unified Computing System (UCS) 2.2(3b) on B Blade Server devices allows local users to gain privile

The Integrated Management Controller on Cisco Unified Computing System (UCS) C servers with software 1.5(3) and 1.6(0.16) has a de

Cisco UCS Central Software 1.2(1a) allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka

The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System (UCS) on C-Series Rack Servers does

The Management subsystem in Cisco Unified Computing System 2.1(3f) and earlier allows remote attackers to obtain sensitive informa

Cisco Integrated Management Controller in Cisco Unified Computing System 2.2(2c)A and earlier allows local users to obtain shell a

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Co

The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via craf

The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM virtual-media data, which allows ma

The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 certificates, which allow

The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM media traffic, which allows remote

The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows man-in-the-mi

The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and read arbitrary

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and execut

The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitr

The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitr

The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every scr

The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (compone

Cross-site request forgery (CSRF) vulnerability in the web-management interface in the fabric interconnect (FI) component in Cisco

The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind

The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain

run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by e

The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain p

Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computin

ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by

The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to g

The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain priv

The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to g

The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows local users to gain privileges via

The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the

The FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an unspecified user account, which makes it ea

The XML API service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) allows remote attackers to cause

A setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrar

Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote at

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Manag

A cluster setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute

The Intelligent Platform Management Interface (IPMI) implementation in the Blade Management Controller in Cisco Unified Computing

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, w

MCTools in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to gain privileges by enteri

MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of servic

The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart

Multiple buffer overflows in the administrative web interface in Cisco Unified Computing System (UCS) allow remote authenticated u

The Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified Computing System (UCS) relies on a h

The KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509 certificates from SSL servers, which

The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle

The C-Series Rack Server component 1.4 in Cisco Unified Computing System (UCS) does not properly restrict inbound access to ports,

Cisco Nexus OS (aka NX-OS) 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict comma

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin