High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-08-08	CVE-2019-1958	Cross-Site Request Forgery (CSRF) vulnerability in Cisco Hyperflex HX Data Platform A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. network low complexity cisco CWE-352	8.8
2019-02-21	CVE-2019-1664	Improper Authentication vulnerability in Cisco Hyperflex HX Data Platform A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster. local low complexity cisco CWE-287	7.8
2019-02-20	CVE-2018-15380	OS Command Injection vulnerability in Cisco Hyperflex HX Data Platform 3.0(1A)/3.5(1A) A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an unauthenticated, adjacent attacker to execute commands as the root user. low complexity cisco CWE-78	8.8
2018-10-05	CVE-2018-15382	External Control of Critical State Data vulnerability in Cisco Hyperflex HX Data Platform 3.0(1A) A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens. network low complexity cisco CWE-642	8.6