Cisco Integrated Management Controller vulnerabilities

• apache log4j, log4j2, apple xcode +141 more +143 more Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints CVE-2021-44228 In KEVPublic exploitFix available EPSS 100.0% 10.0 CriticalDecember 10, 2021
• cisco integrated management controller, c125 m5 firmware, c220 m5 firmware +23 more +25 more Cisco Integrated Management Controller Open Redirect Vulnerability CVE-2021-1397 4.7 MediumMay 6, 2021
• cisco integrated management controller, unified computing system (standalone), enterprise nfv infrastructure software +2 more Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities CVE-2020-3470 9.8 CriticalNovember 18, 2020
• cisco integrated management controller, unified computing system (standalone) +1 more Cisco Integrated Management Controller Command Injection Vulnerability CVE-2020-3371 6.3 MediumNovember 6, 2020
• cisco ucs director, ucs director express for big data, integrated management controller supervisor +2 more Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Role-Based Access Control Vulnerability CVE-2020-3329 4.3 MediumMay 6, 2020
• cisco ucs director, ucs director express for big data, unified computing system director +1 more +3 more Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability CVE-2019-1974 9.8 CriticalAugust 21, 2019
• cisco unified computing system (management software), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller Substring Comparison Privilege Escalation Vulnerability CVE-2019-1907 8.8 HighAugust 21, 2019
• cisco unified computing system (management software), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller Information Disclosure Vulnerability CVE-2019-1908 7.5 HighAugust 21, 2019
• cisco integrated management controller supervisor, ucs director, ucs director express for big data +1 more +3 more Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability CVE-2019-1935 Public exploit EPSS 83.4% 9.8 CriticalAugust 21, 2019
• cisco integrated management controller supervisor, ucs director, ucs director express for big data +1 more +3 more Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Command Injection Vulnerability CVE-2019-1936 Public exploit EPSS 39.5% 7.2 HighAugust 21, 2019
• cisco integrated management controller supervisor, ucs director, ucs director express for big data +1 more +3 more Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability CVE-2019-1937 Public exploit EPSS 75.9% 9.8 CriticalAugust 21, 2019
• cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller CLI Command Injection Vulnerability CVE-2019-1883 7.0 HighAugust 21, 2019
• cisco unified computing system (management software), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller Command Injection Vulnerability CVE-2019-1885 7.2 HighAugust 21, 2019
• cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller CSR Generation Command Injection Vulnerability CVE-2019-1896 7.2 HighAugust 21, 2019
• cisco unified computing system (management software), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller Unauthenticated Denial of Service Vulnerability CVE-2019-1900 7.5 HighAugust 21, 2019
• cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller Privilege Escalation Vulnerability CVE-2019-1863 6.5 MediumAugust 21, 2019
• cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller Command Injection Vulnerability CVE-2019-1864 8.8 HighAugust 21, 2019
• cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller Command Injection Vulnerability CVE-2019-1865 8.8 HighAugust 21, 2019
• cisco unified computing system (management software), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller Buffer Overflow Vulnerability CVE-2019-1871 7.2 HighAugust 21, 2019
• cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller Command Injection Vulnerability CVE-2019-1634 7.2 HighAugust 21, 2019
• cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 more Cisco Integrated Management Controller Command Injection Vulnerability CVE-2019-1850 7.2 HighAugust 21, 2019
• cisco integrated management controller supervisor, ucs director, ucs director express for big data +1 more +3 more Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Denial of Service Vulnerability CVE-2019-12634 8.6 HighAugust 21, 2019
• cisco integrated management controller, unified computing system (management software), unified computing system +2 more Cisco Integrated Management Controller CLI Command Injection Vulnerability CVE-2019-1879 6.4 MediumJune 20, 2019
• cisco integrated management controller, unified computing system (management software), unified computing system +2 more Cisco Integrated Management Controller Information Disclosure Vulnerability CVE-2019-1631 5.3 MediumJune 20, 2019
• cisco integrated management controller, unified computing system (management software), unified computing system +2 more Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability CVE-2019-1632 4.6 MediumJune 20, 2019
• cisco integrated management controller, unified computing system (management software), unified computing system +2 more Cisco Integrated Management Controller Information Disclosure Vulnerability CVE-2019-1627 6.5 MediumJune 20, 2019
• cisco integrated management controller, unified computing system (management software), unified computing system +2 more Cisco Integrated Management Controller Denial of Service Vulnerability CVE-2019-1628 5.5 MediumJune 20, 2019
• cisco integrated management controller, unified computing system (management software), unified computing system +2 more Cisco Integrated Management Controller Arbitrary File Write Vulnerability CVE-2019-1629 5.3 MediumJune 20, 2019
• cisco integrated management controller, unified computing system (management software), unified computing system +2 more Cisco Integrated Management Controller Denial of Service Vulnerability CVE-2019-1630 5.5 MediumJune 20, 2019
• cisco integrated management controller (imc) supervisor, integrated management controller +1 more Cisco Integrated Management Controller Supervisor SQL Injection Vulnerability CVE-2018-15447 6.5 MediumNovember 8, 2018
• cisco integrated management controller supervisor, unified computing system director +1 more Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability CVE-2018-15404 6.5 MediumOctober 5, 2018
• cisco integrated management controller supervisor A vulnerability in the web-based management interface of Cisco Integrated Management Controller... CVE-2018-0149 4.8 MediumJune 7, 2018
• cisco integrated management controller, integrated management controller supervisor +1 more A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c)... CVE-2017-6619 8.8 HighApril 20, 2017
• cisco integrated management controller, integrated management controller supervisor +1 more A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c)... CVE-2017-6618 5.4 MediumApril 20, 2017
• cisco integrated management controller, integrated management controller supervisor +1 more A vulnerability in the session identification management functionality of the web-based GUI of... CVE-2017-6617 5.4 MediumApril 20, 2017
• cisco integrated management controller, integrated management controller supervisor +1 more A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c)... CVE-2017-6616 8.8 HighApril 20, 2017
• cisco integrated management controller supervisor The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9)... CVE-2015-6399 6.8 MediumDecember 15, 2015
• cisco integrated management controller supervisor, unified computing system director +1 more The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor... CVE-2015-6259 9.4 HighSeptember 4, 2015
• cisco integrated management controller, unified computing system e140d, unified computing system e140dp +5 more +7 more The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified... CVE-2014-3348 5.0 MediumSeptember 10, 2014
• cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect, unified computing system 6248up fabric interconnect +3 more +5 more Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote... CVE-2013-1186 7.5 HighApril 25, 2013
• cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect, unified computing system 6248up fabric interconnect +3 more +5 more The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x... CVE-2013-1185 9.3 HighApril 25, 2013
• cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect, unified computing system 6248up fabric interconnect +3 more +5 more The management API in the XML API management service in the Manager component in Cisco Unified... CVE-2013-1184 7.8 HighApril 25, 2013
• cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect, unified computing system 6248up fabric interconnect +3 more +5 more The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS... CVE-2013-1182 9.3 HighApril 25, 2013