Cisco Unified Computing System E-Series Software (UCSE) vulnerabilities
6 known vulnerabilities in Cisco Unified Computing System E-Series Software (UCSE) from Cisco. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
Cisco Enterprise NFV Infrastructure Software: Exposed Dangerous Method or Function
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an una
- 8.8 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Special Elements used in a Command
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerab
- 9.8 Critical severity
A vulnerability in the change password functionality of Cisco Integrated Management Controller…
A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system as Admin. This vulnerability is due to incorrect ha
- 7.1 High severity
Cisco Unified Computing System (Managed): URL Redirection to Untrusted Site
A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficien
- 8.7 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their
- 8.8 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, t