Cisco Ucs Director — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Ucs Director, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (26)

• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2020-3247 — CVSS 9.8 (critical): Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to…
• CVE-2019-1935 — CVSS 9.8 (critical): A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data…
• CVE-2019-1937 — CVSS 9.8 (critical): A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and…
• CVE-2019-1938 — CVSS 9.8 (critical): A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data could allow an…
• CVE-2019-1974 — CVSS 9.8 (critical): A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and…
• CVE-2020-3250 — CVSS 9.8 (critical): Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to…
• CVE-2020-3243 — CVSS 9.8 (critical): Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to…
• CVE-2020-3248 — CVSS 9.8 (critical): Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to…
• CVE-2014-0709 — CVSS 9.3 (critical): Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote…
• CVE-2018-0148 — CVSS 8.8 (high): A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Controller (IMC)…
• CVE-2020-3239 — CVSS 8.8 (high): Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to…
• CVE-2020-3251 — CVSS 8.8 (high): Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to…
• CVE-2020-3249 — CVSS 7.5 (high): Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to…
• CVE-2019-12634 — CVSS 7.5 (high): A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and…
• CVE-2020-3240 — CVSS 7.3 (high): Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to…
• CVE-2019-1936 — CVSS 7.2 (high): A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and…
• CVE-2020-3241 — CVSS 6.5 (medium): A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to perform a path traversal…
• CVE-2018-15405 — CVSS 6.5 (medium): A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS…
• CVE-2020-3252 — CVSS 6.5 (medium): Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to…
• CVE-2018-15406 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a…
• CVE-2019-16003 — CVSS 5.3 (medium): A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download…
• CVE-2020-3242 — CVSS 4.9 (medium): A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with administrative privileges to…
• CVE-2022-20765 — CVSS 4.8 (medium): A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site…
• CVE-2020-3464 — CVSS 4.8 (medium): A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacker with…
• CVE-2020-3329 — CVSS 4.3 (medium): A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS…