Cisco
Cisco UCS Manager: vulnerabilidades y CVE
Cisco UCS Manager tiene 16 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE16
Últimos 12 meses3
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20099 | Media (6.7) | 0.66% | — | 25 feb 2026 | This vulnerability is due to insufficient input validation of command arguments supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the… |
| CVE-2026-20037 | Media (4.4) | 0.10% | — | 25 feb 2026 | — |
| CVE-2026-20036 | Media (6.5) | 0.45% | — | 25 feb 2026 | — |
| CVE-2025-20342 | Media (5.4) | 0.22% | — | 27 ago 2025 | A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with low privileges to conduct a stored… |
| CVE-2025-20317 | Alta (7.1) | 0.43% | — | 27 ago 2025 | A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website.… |
| CVE-2025-20295 | Media (6) | 0.18% | — | 27 ago 2025 | A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying… |
| CVE-2025-20294 | Media (6.5) | 1.2% | — | 27 ago 2025 | Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on… |
| CVE-2025-20296 | Media (5.4) | 0.23% | — | 27 ago 2025 | A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.… |
| CVE-2021-1397 | Media (6.1) | 0.83% | — | 6 may 2021 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This… |
| CVE-2020-10136 | Media (5.3) | 29% | — | 2 jun 2020 | IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the… |
| CVE-2020-3173 | Alta (7.8) | 0.44% | — | 26 feb 2020 | A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) on an affected… |
| CVE-2020-3172 | Alta (8.8) | 1.9% | — | 26 feb 2020 | A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service… |
| CVE-2020-3171 | Alta (7.8) | 0.48% | — | 26 feb 2020 | A vulnerability in the local management (local-mgmt) CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… |
| CVE-2020-3167 | Alta (7.8) | 0.89% | — | 26 feb 2020 | A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS). The vulnerability is… |
| CVE-2020-3120 | Media (6.5) | 1.6% | — | 5 feb 2020 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected… |
| CVE-2020-3119 | Alta (8.8) | 4.8% | — | 5 feb 2020 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.