Cisco Ucs Manager vulnerabilities

9 CVEs affecting Cisco Ucs Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20296, published 2025-08-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-10136, published 2020-06-02. Medium severity, CVSS 5.3. EPSS: 28.5% chance of exploitation in the next 30 days. IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected…
CVE-2020-3119, published 2020-02-05. High severity, CVSS 8.8. EPSS: 4.8% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected…
CVE-2020-3172, published 2020-02-26. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a…
CVE-2020-3120, published 2020-02-05. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a…
CVE-2020-3167, published 2020-02-26. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS).…
CVE-2021-1397, published 2021-05-06. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web…
CVE-2020-3171, published 2020-02-26. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the local management (local-mgmt) CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2020-3173, published 2020-02-26. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system…
CVE-2025-20296, published 2025-08-27. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user…