Filtered by vendor Cisco Subscriptions
Filtered by product Unified Computing System Software Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-20090 1 Cisco 3 Enterprise Nfv Infrastructure Software, Unified Computing System Manager, Unified Computing System Software 2026-04-02 4.8 Medium
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.
CVE-2013-1198 1 Cisco 1 Unified Computing System Software 2025-04-11 N/A
Cross-site scripting (XSS) vulnerability in a Flash component in Cisco Unified Computing System (UCS) Central allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud15430.