CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-1397

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website. This vulnerability is known as an open redirect attack, which is used in phishing attacks to get users to visit malicious sites without their knowledge.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.4%

CVSS Severity

CVSS v3 Score 4.7

CVSS v2 Score 5.8

References

Products affected by CVE-2021-1397

Cisco » Integrated Management Controller » Version: N/A

cpe:2.3:a:cisco:integrated_management_controller:-
Cisco » Integrated Management Controller » Version: 3.0(1c)

cpe:2.3:a:cisco:integrated_management_controller:3.0(1c)
Cisco » Integrated Management Controller » Version: 3.0(3e)

cpe:2.3:a:cisco:integrated_management_controller:3.0(3e)
Cisco » Integrated Management Controller » Version: 3.0(4q)

cpe:2.3:a:cisco:integrated_management_controller:3.0(4q)
Cisco » Integrated Management Controller » Version: 3.1

cpe:2.3:a:cisco:integrated_management_controller:3.1
Cisco » Ucs Manager » Version: 3.2

cpe:2.3:a:cisco:ucs_manager:3.2
Cisco » Ucs Manager » Version: 3.2(3m)

cpe:2.3:a:cisco:ucs_manager:3.2(3m)
Cisco » Ucs Manager » Version: 3.2(3n)

cpe:2.3:a:cisco:ucs_manager:3.2(3n)
Cisco » Ucs Manager » Version: 3.2(3n)a

cpe:2.3:a:cisco:ucs_manager:3.2(3n)a
Cisco » Ucs Manager » Version: 4.0

cpe:2.3:a:cisco:ucs_manager:4.0
Cisco » Ucs Manager » Version: 4.0(1a)a

cpe:2.3:a:cisco:ucs_manager:4.0(1a)a
Cisco » Ucs Manager » Version: 4.0(4c)

cpe:2.3:a:cisco:ucs_manager:4.0(4c)
Cisco » Ucs Manager » Version: 4.0(4f)

cpe:2.3:a:cisco:ucs_manager:4.0(4f)
Cisco » Ucs Manager » Version: 4.0(4g)

cpe:2.3:a:cisco:ucs_manager:4.0(4g)
Cisco » Ucs Manager » Version: 4.1

cpe:2.3:a:cisco:ucs_manager:4.1
Cisco » Ucs Manager » Version: 4.1(3b)

cpe:2.3:a:cisco:ucs_manager:4.1(3b)
Cisco » C125 M5 » Version: N/A

cpe:2.3:h:cisco:c125_m5:-
Cisco » C220 M5 » Version: N/A

cpe:2.3:h:cisco:c220_m5:-
Cisco » C220 M6 » Version: N/A

cpe:2.3:h:cisco:c220_m6:-
Cisco » C225 M6 » Version: N/A

cpe:2.3:h:cisco:c225_m6:-
Cisco » C240 M5 » Version: N/A

cpe:2.3:h:cisco:c240_m5:-
Cisco » C240 M6 » Version: N/A

cpe:2.3:h:cisco:c240_m6:-
Cisco » C245 M6 » Version: N/A

cpe:2.3:h:cisco:c245_m6:-
Cisco » C480 M5 » Version: N/A

cpe:2.3:h:cisco:c480_m5:-
Cisco » C480 Ml M5 » Version: N/A

cpe:2.3:h:cisco:c480_ml_m5:-
Cisco » Encs 5100 » Version: N/A

cpe:2.3:h:cisco:encs_5100:-
Cisco » Encs 5400 » Version: N/A

cpe:2.3:h:cisco:encs_5400:-
Cisco » Ucs-E1120d-M3 » Version: N/A

cpe:2.3:h:cisco:ucs-e1120d-m3:-
Cisco » Ucs-E140d » Version: N/A

cpe:2.3:h:cisco:ucs-e140d:-
Cisco » Ucs-E140dp » Version: N/A

cpe:2.3:h:cisco:ucs-e140dp:-
Cisco » Ucs-E140s-M1 » Version: N/A

cpe:2.3:h:cisco:ucs-e140s-m1:-
Cisco » Ucs-E140s-M2 » Version: N/A

cpe:2.3:h:cisco:ucs-e140s-m2:-
Cisco » Ucs-E140s » Version: N/A

cpe:2.3:h:cisco:ucs-e140s:-
Cisco » Ucs-E160d » Version: N/A

cpe:2.3:h:cisco:ucs-e160d:-
Cisco » Ucs-E160dp-M1 » Version: N/A

cpe:2.3:h:cisco:ucs-e160dp-m1:-
Cisco » Ucs-E160s-M3 » Version: N/A

cpe:2.3:h:cisco:ucs-e160s-m3:-
Cisco » Ucs-E180d-M2 » Version: N/A

cpe:2.3:h:cisco:ucs-e180d-m2:-
Cisco » Ucs-E180d-M3 » Version: N/A

cpe:2.3:h:cisco:ucs-e180d-m3:-
Cisco » Ucs S3260 » Version: N/A

cpe:2.3:h:cisco:ucs_s3260:-
Cisco » C125 M5 Firmware » Version: N/A

cpe:2.3:o:cisco:c125_m5_firmware:-
Cisco » C220 M5 Firmware » Version: N/A

cpe:2.3:o:cisco:c220_m5_firmware:-
Cisco » C220 M6 Firmware » Version: N/A

cpe:2.3:o:cisco:c220_m6_firmware:-
Cisco » C225 M6 Firmware » Version: N/A

cpe:2.3:o:cisco:c225_m6_firmware:-
Cisco » C240 M5 Firmware » Version: N/A

cpe:2.3:o:cisco:c240_m5_firmware:-
Cisco » C240 M6 Firmware » Version: N/A

cpe:2.3:o:cisco:c240_m6_firmware:-
Cisco » C245 M6 Firmware » Version: N/A

cpe:2.3:o:cisco:c245_m6_firmware:-
Cisco » C480 M5 Firmware » Version: N/A

cpe:2.3:o:cisco:c480_m5_firmware:-
Cisco » C480 Ml M5 Firmware » Version: N/A

cpe:2.3:o:cisco:c480_ml_m5_firmware:-
Cisco » Encs 5100 Firmware » Version: N/A

cpe:2.3:o:cisco:encs_5100_firmware:-
Cisco » Encs 5100 Firmware » Version: 4.4.2

cpe:2.3:o:cisco:encs_5100_firmware:4.4.2
Cisco » Encs 5400 Firmware » Version: N/A

cpe:2.3:o:cisco:encs_5400_firmware:-
Cisco » Encs 5400 Firmware » Version: 4.4.2

cpe:2.3:o:cisco:encs_5400_firmware:4.4.2
Cisco » Ucs-E1120d-M3 Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e1120d-m3_firmware:-
Cisco » Ucs-E1120d-M3 Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e1120d-m3_firmware:3.2(11.5)
Cisco » Ucs-E1120d-M3 Firmware » Version: 3.2(3)

cpe:2.3:o:cisco:ucs-e1120d-m3_firmware:3.2(3)
Cisco » Ucs-E140d Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e140d_firmware:-
Cisco » Ucs-E140d Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e140d_firmware:3.2(11.5)
Cisco » Ucs-E140dp Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e140dp_firmware:-
Cisco » Ucs-E140dp Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e140dp_firmware:3.2(11.5)
Cisco » Ucs-E140s-M1 Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e140s-m1_firmware:-
Cisco » Ucs-E140s-M1 Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e140s-m1_firmware:3.2(11.5)
Cisco » Ucs-E140s-M1 Firmware » Version: 3.2(3)

cpe:2.3:o:cisco:ucs-e140s-m1_firmware:3.2(3)
Cisco » Ucs-E140s-M2 Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e140s-m2_firmware:-
Cisco » Ucs-E140s-M2 Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e140s-m2_firmware:3.2(11.5)
Cisco » Ucs-E140s-M2 Firmware » Version: 3.2(3)

cpe:2.3:o:cisco:ucs-e140s-m2_firmware:3.2(3)
Cisco » Ucs-E140s Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e140s_firmware:-
Cisco » Ucs-E140s Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e140s_firmware:3.2(11.5)
Cisco » Ucs-E160d Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e160d_firmware:-
Cisco » Ucs-E160d Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e160d_firmware:3.2(11.5)
Cisco » Ucs-E160dp-M1 Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e160dp-m1_firmware:-
Cisco » Ucs-E160dp-M1 Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e160dp-m1_firmware:3.2(11.5)
Cisco » Ucs-E160dp-M1 Firmware » Version: 3.2(3)

cpe:2.3:o:cisco:ucs-e160dp-m1_firmware:3.2(3)
Cisco » Ucs-E160s-M3 Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e160s-m3_firmware:-
Cisco » Ucs-E160s-M3 Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e160s-m3_firmware:3.2(11.5)
Cisco » Ucs-E160s-M3 Firmware » Version: 3.2(3)

cpe:2.3:o:cisco:ucs-e160s-m3_firmware:3.2(3)
Cisco » Ucs-E180d-M2 Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e180d-m2_firmware:-
Cisco » Ucs-E180d-M2 Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e180d-m2_firmware:3.2(11.5)
Cisco » Ucs-E180d-M2 Firmware » Version: 3.2(3)

cpe:2.3:o:cisco:ucs-e180d-m2_firmware:3.2(3)
Cisco » Ucs-E180d-M3 Firmware » Version: N/A

cpe:2.3:o:cisco:ucs-e180d-m3_firmware:-
Cisco » Ucs-E180d-M3 Firmware » Version: 3.2(11.5)

cpe:2.3:o:cisco:ucs-e180d-m3_firmware:3.2(11.5)
Cisco » Ucs-E180d-M3 Firmware » Version: 3.2(3)

cpe:2.3:o:cisco:ucs-e180d-m3_firmware:3.2(3)
Cisco » Ucs S3260 Firmware » Version: N/A

cpe:2.3:o:cisco:ucs_s3260_firmware:-
Cisco » Ucs S3260 Firmware » Version: 4.0(2o)

cpe:2.3:o:cisco:ucs_s3260_firmware:4.0(2o)

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-1397

Products

Pricing

Contact Us