Cisco Ucs Director

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Cisco UCS Director and Cisco UCS Director Express for Big Data API Authentication Bypass Vulnerability

Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to the CLI interface, aka Bug ID CSCui73930.

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Controller (IMC) Supervisor Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protection by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the affected interface to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions, via the user's web browser and with the user's privileges, on an affected system. Cisco Bug IDs: CSCvf71929.

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Denial of Service Vulnerability

Cisco UCS Director Path Traversal Vulnerability

Cisco Integrated Management Controller Supervisor and Cisco UCS Director Authenticated Web Interface Information Disclosure Vulnerability

Cisco UCS Director Stored Cross-Site Scripting Vulnerability

Cisco UCS Director Information Disclosure Vulnerability

Cisco UCS Director Information Disclosure Vulnerability

Cisco UCS Director Stored Cross-Site Scripting Vulnerability

Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability

Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Role-Based Access Control Vulnerability