CVE-2016-1374

ALTO 8.8CVE-2016-1374 · Published 28/07/2016 · updated 17/06/2026

In breve

CVE-2016-1374 è una vulnerabilità ALTO (CVSS 8.8) che riguarda unified computing system performance manager (cisco).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.7%, superiore al 86.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
unified computing system performance manager cisco	`= 1.0_base= 1.1.0= 1.1.1= 2.0.0`	No fix yet

Description

The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160720-ucsperf · Vendor Advisory
securityfocus.com/bid/92044
securitytracker.com/id/1036410

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free