Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-1498

Cisco HyperFlex HX Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 9.8 Critical EPSS 100.0% KEV · Listed
Vendors
Cisco
Products
Hyperflex Hx220c Af M5 Hyperflex Hx220c All Nvme M5 Hyperflex Hx220c Edge M5 and 5 more
CVE-2021-1497

Cisco HyperFlex HX Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 9.8 Critical EPSS 99.9% KEV · Listed
Vendors
Cisco
Products
Hyperflex Hx220c Af M5 Hyperflex Hx220c All Nvme M5 Hyperflex Hx220c Edge M5 and 5 more
CVE-2021-1499

Cisco HyperFlex HX Data Platform File Upload Vulnerability

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit this vulnerability by sending a specific HTTP request to an affected device. A successful exploit could allow the attacker to upload files to the affected device with the permissions of the tomcat8 user.

CVSS 3.1 · 5.3 Medium EPSS 80.0% KEV · Not listed
Vendors
Cisco
Products
Hyperflex Hx220c Af M5 Hyperflex Hx220c All Nvme M5 Hyperflex Hx220c Edge M5 and 5 more