A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device. This vulnerability is due to insufficient validation...
Product
Cisco Unified Computing System Central Software vulnerabilities
3 published CVES affecting Cisco Unified Computing System Central Software, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Latest Cisco Unified Computing System Central Software CVEs
Newest publication first
-
HighCVSS 7.6 EPSS 1.4%
-
MediumCVSS 6.3 EPSS 0.11%
A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file to learn sensitive information that is stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption metho...
-
LowCVSS 3.5 EPSS 0.42%
A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate va...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.