Vulnerabilities > Cisco > Integrated Management Controller

DATE CVE VULNERABILITY TITLE RISK
2018-11-08 CVE-2018-15447 SQL Injection vulnerability in Cisco Integrated Management Controller
A vulnerability in the web framework code of Cisco Integrated Management Controller (IMC) Supervisor could allow an unauthenticated, remote attacker to execute arbitrary SQL queries.
network
low complexity
cisco CWE-89
7.5
2014-09-10 CVE-2014-3348 Improper Input Validation vulnerability in Cisco products
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.
network
low complexity
cisco CWE-20
5.0