CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3248

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.461

EPSS Ranking 97.5%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2020-3248

Cisco » Ucs Director » Version: 6.0.0.0

cpe:2.3:a:cisco:ucs_director:6.0.0.0
Cisco » Ucs Director » Version: 6.0.0.1

cpe:2.3:a:cisco:ucs_director:6.0.0.1
Cisco » Ucs Director » Version: 6.0.1.0

cpe:2.3:a:cisco:ucs_director:6.0.1.0
Cisco » Ucs Director » Version: 6.0.1.1

cpe:2.3:a:cisco:ucs_director:6.0.1.1
Cisco » Ucs Director » Version: 6.0.1.2

cpe:2.3:a:cisco:ucs_director:6.0.1.2
Cisco » Ucs Director » Version: 6.0.1.3

cpe:2.3:a:cisco:ucs_director:6.0.1.3
Cisco » Ucs Director » Version: 6.5.0.0

cpe:2.3:a:cisco:ucs_director:6.5.0.0
Cisco » Ucs Director » Version: 6.5.0.1

cpe:2.3:a:cisco:ucs_director:6.5.0.1
Cisco » Ucs Director » Version: 6.5.0.2

cpe:2.3:a:cisco:ucs_director:6.5.0.2
Cisco » Ucs Director » Version: 6.5.0.3

cpe:2.3:a:cisco:ucs_director:6.5.0.3
Cisco » Ucs Director » Version: 6.5.0.4

cpe:2.3:a:cisco:ucs_director:6.5.0.4
Cisco » Ucs Director » Version: 6.6.0.0

cpe:2.3:a:cisco:ucs_director:6.6.0.0
Cisco » Ucs Director » Version: 6.6.1.0

cpe:2.3:a:cisco:ucs_director:6.6.1.0
Cisco » Ucs Director » Version: 6.6.2.0

cpe:2.3:a:cisco:ucs_director:6.6.2.0
Cisco » Ucs Director » Version: 6.7.0.0

cpe:2.3:a:cisco:ucs_director:6.7.0.0
Cisco » Ucs Director » Version: 6.7.1.0

cpe:2.3:a:cisco:ucs_director:6.7.1.0
Cisco » Ucs Director » Version: 6.7.2.0

cpe:2.3:a:cisco:ucs_director:6.7.2.0
Cisco » Ucs Director » Version: 6.7.3.0

cpe:2.3:a:cisco:ucs_director:6.7.3.0
Cisco » Ucs Director Express For Big Data » Version: 2.0.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.0.0.0
Cisco » Ucs Director Express For Big Data » Version: 2.1.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.1.0.0
Cisco » Ucs Director Express For Big Data » Version: 2.1.0.2

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.1.0.2
Cisco » Ucs Director Express For Big Data » Version: 3.0.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.0.1.3

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.1.3
Cisco » Ucs Director Express For Big Data » Version: 3.5.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.5.0.3

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.3
Cisco » Ucs Director Express For Big Data » Version: 3.6.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.6.1.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.1.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.1.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.1.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.2.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.2.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.3.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3248

Products

Pricing

Contact Us