Cisco Ucs Director vulnerabilities

26 CVEs affecting Cisco Ucs Director, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-20765, published 2022-05-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability, published 2021-12-10. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 100% chance of exploitation in the next 30 days. Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker…
CVE-2020-3243, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 88.4% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
CVE-2019-1935, published 2019-08-21. Critical severity, CVSS 9.8. EPSS: 83.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in…
CVE-2019-1937, published 2019-08-21. Critical severity, CVSS 9.8. EPSS: 75.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an…
CVE-2020-3247, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 75.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
CVE-2020-3248, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 74.4% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
CVE-2020-3239, published 2020-04-15. High severity, CVSS 8.8. EPSS: 73.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
CVE-2020-3251, published 2020-04-15. High severity, CVSS 8.8. EPSS: 61.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
CVE-2020-3250, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 60.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
CVE-2019-1936, published 2019-08-21. High severity, CVSS 7.2. EPSS: 39.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an…

Latest

CVE-2022-20765, published 2022-05-27. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due…
CVE-2020-3464, published 2020-08-17. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS)…
CVE-2020-3242, published 2020-06-18. Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with administrative privileges to obtain confidential information from an affected device. The…
CVE-2020-3241, published 2020-06-18. Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to perform a path traversal attack on an affected device. The vulnerability is due to…
CVE-2020-3329, published 2020-05-06. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow a read-only…
CVE-2020-3252, published 2020-04-15. Medium severity, CVSS 6.5. EPSS: 5.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
CVE-2020-3249, published 2020-04-15. High severity, CVSS 7.5. EPSS: 23.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…