CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3250

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.897

EPSS Ranking 99.5%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2020-3250

Cisco » Ucs Director » Version: 6.0.0.0

cpe:2.3:a:cisco:ucs_director:6.0.0.0
Cisco » Ucs Director » Version: 6.0.0.1

cpe:2.3:a:cisco:ucs_director:6.0.0.1
Cisco » Ucs Director » Version: 6.0.1.0

cpe:2.3:a:cisco:ucs_director:6.0.1.0
Cisco » Ucs Director » Version: 6.0.1.1

cpe:2.3:a:cisco:ucs_director:6.0.1.1
Cisco » Ucs Director » Version: 6.0.1.2

cpe:2.3:a:cisco:ucs_director:6.0.1.2
Cisco » Ucs Director » Version: 6.0.1.3

cpe:2.3:a:cisco:ucs_director:6.0.1.3
Cisco » Ucs Director » Version: 6.5.0.0

cpe:2.3:a:cisco:ucs_director:6.5.0.0
Cisco » Ucs Director » Version: 6.5.0.1

cpe:2.3:a:cisco:ucs_director:6.5.0.1
Cisco » Ucs Director » Version: 6.5.0.2

cpe:2.3:a:cisco:ucs_director:6.5.0.2
Cisco » Ucs Director » Version: 6.5.0.3

cpe:2.3:a:cisco:ucs_director:6.5.0.3
Cisco » Ucs Director » Version: 6.5.0.4

cpe:2.3:a:cisco:ucs_director:6.5.0.4
Cisco » Ucs Director » Version: 6.6.0.0

cpe:2.3:a:cisco:ucs_director:6.6.0.0
Cisco » Ucs Director » Version: 6.6.1.0

cpe:2.3:a:cisco:ucs_director:6.6.1.0
Cisco » Ucs Director » Version: 6.6.2.0

cpe:2.3:a:cisco:ucs_director:6.6.2.0
Cisco » Ucs Director » Version: 6.7.0.0

cpe:2.3:a:cisco:ucs_director:6.7.0.0
Cisco » Ucs Director » Version: 6.7.1.0

cpe:2.3:a:cisco:ucs_director:6.7.1.0
Cisco » Ucs Director » Version: 6.7.2.0

cpe:2.3:a:cisco:ucs_director:6.7.2.0
Cisco » Ucs Director » Version: 6.7.3.0

cpe:2.3:a:cisco:ucs_director:6.7.3.0
Cisco » Ucs Director Express For Big Data » Version: 2.0.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.0.0.0
Cisco » Ucs Director Express For Big Data » Version: 2.1.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.1.0.0
Cisco » Ucs Director Express For Big Data » Version: 2.1.0.2

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.1.0.2
Cisco » Ucs Director Express For Big Data » Version: 3.0.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.0.1.3

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.1.3
Cisco » Ucs Director Express For Big Data » Version: 3.5.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.5.0.3

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.3
Cisco » Ucs Director Express For Big Data » Version: 3.6.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.6.1.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.1.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.1.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.1.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.2.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.2.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.3.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3250

Products

Pricing

Contact Us