cisco unified computing system güvenlik açıkları (CVE)

cisco unified computing system için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

13 sonuç
7.1Yüksek
CVE-2026-20293

Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

Cisco Cisco Enterprise NFV Infrastructure Software; Cisco Cisco Unified Computing System (Managed); Cisco Cisco Unified Computing System (Standalone); Cisco Cisco Unified Computing System E-Series Software (UCSE)

A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an un…

6.5Orta
CVE-2026-20288

Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability

Cisco Cisco Enterprise NFV Infrastructure Software; Cisco Cisco Unified Computing System (Standalone); Cisco Cisco Unified Computing System E-Series Software (UCSE)

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.&…

4.8Orta
CVE-2026-20090

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Cisco Cisco Enterprise NFV Infrastructure Software; Cisco Cisco Unified Computing System (Standalone); Cisco Cisco Unified Computing System E-Series Software (UCSE)

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient valida…

4.8Orta
CVE-2026-20089

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Cisco Cisco Enterprise NFV Infrastructure Software; Cisco Cisco Unified Computing System (Standalone); Cisco Cisco Unified Computing System E-Series Software (UCSE)

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient valida…

4.8Orta
CVE-2026-20088

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Cisco Cisco Enterprise NFV Infrastructure Software; Cisco Cisco Unified Computing System (Standalone); Cisco Cisco Unified Computing System E-Series Software (UCSE)

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient valida…

4.8Orta
CVE-2026-20087

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Cisco Cisco Enterprise NFV Infrastructure Software; Cisco Cisco Unified Computing System (Standalone); Cisco Cisco Unified Computing System E-Series Software (UCSE)

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient valida…

6.5Orta
CVE-2026-20096

Cisco Integrated Management Controller Command Injection Vulnerability

Cisco Cisco Enterprise NFV Infrastructure Software; Cisco Cisco Unified Computing System (Standalone); Cisco Cisco Unified Computing System E-Series Software (UCSE)

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. Th…

8.8Yüksek
CVE-2026-20094

Cisco Integrated Management Controller Command Injection Vulnerability

Cisco Cisco Unified Computing System (Standalone); Cisco Cisco Unified Computing System E-Series Software (UCSE)

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vuln…

1.1%EPSS
6.5Orta
CVE-2026-20095

Cisco Integrated Management Controller Command Injection Vulnerability

Cisco Cisco Enterprise NFV Infrastructure Software; Cisco Cisco Unified Computing System (Standalone); Cisco Cisco Unified Computing System E-Series Software (UCSE)

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. Th…

6.1Orta
CVE-2026-20085

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Cisco Cisco Enterprise NFV Infrastructure Software; Cisco Cisco Unified Computing System (Standalone); Cisco Cisco Unified Computing System E-Series Software (UCSE)

A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An att…

10.0Kritik
CVE-2021-44228 KEV Fidye yazılımında kullanılıyor

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Apache Software Foundation Apache Log4j2

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who …

100%EPSS