Product by Cisco
Cisco UCS Director
26 known vulnerabilities in Cisco UCS Director (Cisco), 1 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
14
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 75 other products | 10.0 | |
| Critical | CVE-2020-3243 | Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data | 9.8 | |
| Critical | CVE-2019-1935 | Cisco Unified Computing System Director: Use of Hard-coded Credentials | 9.8 | |
| Critical | CVE-2019-1937 | Cisco Unified Computing System Director: Improper Authentication | 9.8 | |
| Critical | CVE-2020-3247 | Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data | 9.8 | |
| Critical | CVE-2020-3248 | Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data | 9.8 | |
| Critical | CVE-2020-3239 | Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data | 9.8 | |
| Critical | CVE-2020-3251 | Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data | 9.8 | |
| Critical | CVE-2020-3250 | Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data | 9.8 | |
| Critical | CVE-2020-3240 | Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data | 9.8 | |
| Critical | CVE-2020-3249 | Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data | 9.8 | |
| Critical | CVE-2020-3252 | Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data | 9.8 | |
| Critical | CVE-2019-1938 | Cisco Unified Computing System Director: Improper Authentication | 9.8 | |
| Critical | CVE-2019-1974 | Cisco Unified Computing System Director: Improper Authentication | 9.8 | |
| High | CVE-2019-1936 | Cisco Unified Computing System Director: Improper Input Validation | 7.2 | |
| High | CVE-2019-12634 | Cisco Unified Computing System Director: Permissions, Privileges, and Access Controls | 8.6 | |
| Medium | CVE-2020-3241 | Cisco UCS Director Path Traversal Vulnerability | 6.5 | |
| Medium | CVE-2018-15405 | Cisco UCS Director: Improper Authorization | 6.5 | |
| High | CVE-2018-0148 | Cisco UCS Director: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2018-15406 | Cisco UCS Director Stored Cross-Site Scripting Vulnerability | 6.1 | |
| Medium | CVE-2019-16003 | Cisco UCS Director Information Disclosure Vulnerability | 4.3 | |
| Medium | CVE-2020-3242 | Cisco UCS Director Information Disclosure Vulnerability | 4.9 | |
| Not rated | CVE-2014-0709 | Cisco UCS Director: Hard-coded Credentials | — | |
| Medium | CVE-2020-3464 | Cisco UCS Director Stored Cross-Site Scripting Vulnerability | 4.8 | |
| Medium | CVE-2022-20765 | Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability | 4.8 |
News
- There's only so much code: the rise in vulnerability numberscisco-talos,
- SSA-397453 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUSsiemens-productcert
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert