High

DATE	CVE	VULNERABILITY TITLE	RISK
2020-11-06	CVE-2020-3371	OS Command Injection vulnerability in Cisco Integrated Management Controller 3.0(1C) A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary code and execute arbitrary commands at the underlying operating system level. network low complexity cisco CWE-78	8.8
2019-06-20	CVE-2019-1632	Cross-Site Request Forgery (CSRF) vulnerability in Cisco products A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. network low complexity cisco CWE-352	8.0