CVE-2020-3240CWE-20
Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data
Critical · published April 15, 2020
What it is
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
The record
Technical detail
- CVSS v3.0
- 9.8 · CRITICAL
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.38693 · 98.6th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2020-04-15T20:10Z
EPSS history
Timeline