Cisco Cisco Unified Computing System E-Series Software (UCSE)

Name: Cisco Cisco Unified Computing System E-Series Software (UCSE)
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical11high3medium0low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-20356US	—	29.6% (98th)	Exploit	no fix	2024-04-24	37 versions
CVE-2022-20624US	high7.5	12.4% (96th)	—	no fix	2022-02-23	—
CVE-2020-3470US	critical9.8	4.80% (92nd)	—	no fix	2020-11-18	—
CVE-2018-0431US	high8.8	4.03% (91st)	—	no fix	2018-10-05	2 versions
CVE-2018-0430US	high8.8	4.03% (91st)	—	no fix	2018-10-05	≤ n/a
CVE-2019-1865US	high8.8	3.57% (89th)	—	2.0(13o)	2019-08-21	2 versions
CVE-2019-1850US	high7.2	3.51% (89th)	—	3.0(4k)	2019-08-21	2 versions
CVE-2019-1634US	high7.2	2.81% (86th)	—	2.0(13o)	2019-08-21	2 versions
CVE-2019-1864US	high8.8	2.63% (85th)	—	2.0(13o)	2019-08-21	unspecified → 2.0(13o)
CVE-2020-3371US	high8.8	1.87% (79th)	—	no fix	2020-11-06	—
CVE-2019-1896US	high7.2	1.82% (79th)	—	3.0(4k)	2019-08-21	2 versions
CVE-2019-1863US	high8.1	1.70% (77th)	—	2.0(13o)	2019-08-21	2 versions
CVE-2024-20295US	—	1.57% (75th)	—	no fix	2024-04-24	2 versions
CVE-2026-20094US	—	1.12% (66th)	—	no fix	2026-04-01	43 versions
CVE-2026-20093US	—	0.99% (62nd)	—	no fix	2026-04-01	43 versions
CVE-2026-20095US	—	0.93% (60th)	—	no fix	2026-04-01	43 versions
CVE-2021-1397US	medium6.1	0.83% (57th)	—	no fix	2021-05-06	—
CVE-2026-20096US	—	0.72% (54th)	—	no fix	2026-04-01	43 versions
CVE-2026-20288US	—	0.64% (50th)	—	no fix	2026-08-05	29 versions
CVE-2023-20228US	medium6.1	0.48% (41st)	—	no fix	2023-08-16	38 versions
CVE-2025-20317US	—	0.45% (38th)	—	no fix	2025-08-27	42 versions
CVE-2019-1883US	high7.8	0.41% (35th)	—	3.0(4k)	2019-08-21	2 versions
CVE-2026-20097US	—	0.39% (33rd)	—	no fix	2026-04-01	≤ vers:unknown/*
CVE-2018-0362US	medium4.3	0.35% (29th)	—	no fix	2018-06-21	—
CVE-2026-20198US	—	0.29% (21st)	—	no fix	2026-08-05	31 versions
CVE-2026-20090US	—	0.24% (15th)	—	no fix	2026-04-01	43 versions
CVE-2026-20089US	—	0.24% (15th)	—	no fix	2026-04-01	43 versions
CVE-2025-20342US	—	0.22% (13th)	—	no fix	2025-08-27	42 versions
CVE-2026-20088US	—	0.22% (13th)	—	no fix	2026-04-01	37 versions
CVE-2026-20085US	—	0.18% (8th)	—	no fix	2026-04-01	43 versions
CVE-2026-20087US	—	0.17% (6th)	—	no fix	2026-04-01	43 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-146Improper Neutralization of Expression/Command Delimiters1 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)25 CVEs
USCisco PSIRT (CSAF)17 CVEs
NLNCSC-NL (CSAF)10 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan