A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.

Published 2023-09-06 · Modified

6.1EPSS 0.006

CVE-2017-12315

A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attacker would have to be authenticated as an administrative user to conduct this attack. The vulnerability is due to lack of proper masking of sensitive information in system log files. An attacker could exploit this vulnerability by authenticating to the targeted device and viewing the system log file. An exploit could allow the attacker to view sensitive system information that should have been restricted. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvg31472.

Published 2017-11-16 · Modified

6.0EPSS 0.003

CVE-2018-15407

Cisco HyperFlex World-Readable Sensitive Information Vulnerability

Published 2018-10-05 · Modified

5.5EPSS 0.003

CVE-2021-1499

Cisco HyperFlex HX Data Platform File Upload Vulnerability

Published 2021-05-06 · Modified

5.3EPSS 0.804

CVE-2019-1666

Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability