DeutschShown in its original language — a full translation is planned for a future version.
Cisco UCS und IMC: Mehrere Schwachstellen
view advisory published 2025-08-27
Ein Angreifer kann mehrere Schwachstellen im Cisco Unified Computing System (UCS) und im Cisco Integrated Management Controller ausnutzen, um Administratorrechte zu erlangen, Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder Benutzer auf bösartige Websites umzuleiten.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-20342US | — | — | ||
A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with… | ||||
| CVE-2025-20317US | — | — | ||
A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to… | ||||
| CVE-2025-20296US | — | — | ||
A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) att… | ||||
| CVE-2025-20295US | — | — | ||
A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file… | ||||
| CVE-2025-20294US | — | — | ||
Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges to… | ||||
02
references
External citations — patches, advisories, analysis.
- Cisco Security Advisory cisco-sa-ucs-kvmsxss-6h7AnUyk vom 2025-08-27external
- Cisco Security Advisory cisco-sa-ucs-multi-cmdinj-E4Ukjyrz vom 2025-08-27external
- Cisco Security Advisory cisco-sa-ucs-vkvmorv-CnKrV7HK vom 2025-08-27external
- Cisco Security Advisory cisco-sa-ucs-xss-Ey6XhyPS vom 2025-08-27external
- WID-SEC-W-2025-1917 - CSAF Versionself
- WID-SEC-2025-1917 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan