Skip to content

Product

Cisco HyperFlex HX Data Platform vulnerabilities

6 published CVES affecting Cisco HyperFlex HX Data Platform, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
6
Critical
2
High
0
Medium
4
Low
0
Unscored
0
CISA KEV
2

Latest Cisco HyperFlex HX Data Platform CVEs

Newest publication first

  1. CVE-2023-20263 A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability...

    Published
    MediumCVSS 6.1 EPSS 0.58%

    A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An at...

  2. CVE-2021-1499 Cisco HyperFlex HX Data Platform File Upload Vulnerability

    Published
    MediumCVSS 5.3 EPSS 80.0% Framework module

    A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit...

  3. CVE-2021-1498 Cisco HyperFlex HX Command Injection Vulnerabilities

    Published
    CriticalCVSS 9.8 EPSS 100.0% CISA KEV added 2021-11-03 Exploited in the wild Framework module

    Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this...

  4. CVE-2021-1497 Cisco HyperFlex HX Command Injection Vulnerabilities

    Published
    CriticalCVSS 9.8 EPSS 99.9% CISA KEV added 2021-11-03 Exploited in the wild Framework module

    Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this...

  5. CVE-2020-3389 Cisco Hyperflex HX-Series Software Weak Storage Vulnerability

    Published
    MediumCVSS 4.4 EPSS 0.21%

    A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated, local attacker to retrieve the password that was configured at installation on an affected device. The vulnerability exists because sensitive information is stored as...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.