CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3249

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.262

EPSS Ranking 96.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.8

References

Products affected by CVE-2020-3249

Cisco » Ucs Director » Version: 6.0.0.0

cpe:2.3:a:cisco:ucs_director:6.0.0.0
Cisco » Ucs Director » Version: 6.0.0.1

cpe:2.3:a:cisco:ucs_director:6.0.0.1
Cisco » Ucs Director » Version: 6.0.1.0

cpe:2.3:a:cisco:ucs_director:6.0.1.0
Cisco » Ucs Director » Version: 6.0.1.1

cpe:2.3:a:cisco:ucs_director:6.0.1.1
Cisco » Ucs Director » Version: 6.0.1.2

cpe:2.3:a:cisco:ucs_director:6.0.1.2
Cisco » Ucs Director » Version: 6.0.1.3

cpe:2.3:a:cisco:ucs_director:6.0.1.3
Cisco » Ucs Director » Version: 6.5.0.0

cpe:2.3:a:cisco:ucs_director:6.5.0.0
Cisco » Ucs Director » Version: 6.5.0.1

cpe:2.3:a:cisco:ucs_director:6.5.0.1
Cisco » Ucs Director » Version: 6.5.0.2

cpe:2.3:a:cisco:ucs_director:6.5.0.2
Cisco » Ucs Director » Version: 6.5.0.3

cpe:2.3:a:cisco:ucs_director:6.5.0.3
Cisco » Ucs Director » Version: 6.5.0.4

cpe:2.3:a:cisco:ucs_director:6.5.0.4
Cisco » Ucs Director » Version: 6.6.0.0

cpe:2.3:a:cisco:ucs_director:6.6.0.0
Cisco » Ucs Director » Version: 6.6.1.0

cpe:2.3:a:cisco:ucs_director:6.6.1.0
Cisco » Ucs Director » Version: 6.6.2.0

cpe:2.3:a:cisco:ucs_director:6.6.2.0
Cisco » Ucs Director » Version: 6.7.0.0

cpe:2.3:a:cisco:ucs_director:6.7.0.0
Cisco » Ucs Director » Version: 6.7.1.0

cpe:2.3:a:cisco:ucs_director:6.7.1.0
Cisco » Ucs Director » Version: 6.7.2.0

cpe:2.3:a:cisco:ucs_director:6.7.2.0
Cisco » Ucs Director » Version: 6.7.3.0

cpe:2.3:a:cisco:ucs_director:6.7.3.0
Cisco » Ucs Director Express For Big Data » Version: 2.0.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.0.0.0
Cisco » Ucs Director Express For Big Data » Version: 2.1.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.1.0.0
Cisco » Ucs Director Express For Big Data » Version: 2.1.0.2

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.1.0.2
Cisco » Ucs Director Express For Big Data » Version: 3.0.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.0.1.3

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.1.3
Cisco » Ucs Director Express For Big Data » Version: 3.5.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.5.0.3

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.3
Cisco » Ucs Director Express For Big Data » Version: 3.6.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.6.1.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.1.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.1.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.1.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.2.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.2.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.3.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3249

Products

Pricing

Contact Us