Cisco Unified Computing System Director vulnerabilities

7 CVEs affecting Cisco Unified Computing System Director, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-15404, published 2018-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0238, published 2018-04-19. Critical severity, CVSS 9.9. EPSS: 5% chance of exploitation in the next 30 days. A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System (UCS) Director could allow an authenticated, remote attacker to view unauthorized information…
CVE-2015-6259, published 2015-09-04. High severity, CVSS 9.4. EPSS: 2.8% chance of exploitation in the next 30 days. The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1…
CVE-2018-0219, published 2018-03-08. Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Unified Computing System (UCS) Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
CVE-2017-3817, published 2017-04-07. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authenticated, remote attacker to view unauthorized information for…
CVE-2017-3868, published 2017-03-17. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…
CVE-2018-15404, published 2018-10-05. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to cause a denial of service (DoS)…
CVE-2017-3801, published 2017-02-15. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an authenticated, local attacker to execute arbitrary workflow items with just an end-user profile, a…