Cisco Ucs Director Express For Big Data vulnerabilities

16 CVEs affecting Cisco Ucs Director Express For Big Data, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3329, published 2020-05-06.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-3243, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 88.4% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
• CVE-2019-1935, published 2019-08-21. Critical severity, CVSS 9.8. EPSS: 83.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in…
• CVE-2019-1937, published 2019-08-21. Critical severity, CVSS 9.8. EPSS: 75.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an…
• CVE-2020-3247, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 75.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
• CVE-2020-3248, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 74.4% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
• CVE-2020-3239, published 2020-04-15. High severity, CVSS 8.8. EPSS: 73.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
• CVE-2020-3251, published 2020-04-15. High severity, CVSS 8.8. EPSS: 61.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
• CVE-2020-3250, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 60.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
• CVE-2019-1936, published 2019-08-21. High severity, CVSS 7.2. EPSS: 39.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an…
• CVE-2020-3240, published 2020-04-15. High severity, CVSS 7.3. EPSS: 38.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…

Latest

• CVE-2020-3329, published 2020-05-06. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow a read-only…
• CVE-2020-3252, published 2020-04-15. Medium severity, CVSS 6.5. EPSS: 5.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…
• CVE-2020-3249, published 2020-04-15. High severity, CVSS 7.5. EPSS: 23.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks…