Vulnerabilities > Cisco > UCS Manager > 3.2.3n.a

DATE CVE VULNERABILITY TITLE RISK
2021-05-06 CVE-2021-1397 Open Redirect vulnerability in Cisco products
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.
network
low complexity
cisco CWE-601
6.1
2020-06-02 CVE-2020-10136 Authentication Bypass by Spoofing vulnerability in multiple products
Multiple products that implement the IP Encapsulation within IP standard (RFC 2003, STD 1) decapsulate and route IP-in-IP traffic without any validation, which could allow an unauthenticated remote attacker to route arbitrary traffic via an exposed network interface and lead to spoofing, access control bypass, and other unexpected network behaviors.
network
low complexity
cisco digi hp treck CWE-290
5.0