CVE-2020-3252CWE-20

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Critical · published April 15, 2020

CVSS v3.0
9.8
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.05326 · 92.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-04-15T20:11Z
EPSS history
Timeline
  • 15 APR 20:11Z
    Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data
    cvelistv5