Vulnerabilities > Cisco > UCS Director Express FOR BIG Data > 3.7.2.0

DATE CVE VULNERABILITY TITLE RISK
2019-08-21 CVE-2019-1974 Improper Authentication vulnerability in Cisco products
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass user authentication and gain access as an administrative user.
network
low complexity
cisco CWE-287
critical
 9.8
9.8
2019-08-21 CVE-2019-12634 Missing Authentication for Critical Function vulnerability in Cisco products
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
network
low complexity
cisco CWE-306
7.5
7.5