[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLzdp8Zr_Ma8L25HkKqY5tG8VQADdgbh35zUWzLY2LC0":3,"g5a-ex:cisco\u002Fintegrated_management_controller@*":133,"g5a-family:cisco\u002Fintegrated_management_controller":135},{"success":4,"data":5},true,{"product":6,"versions":38,"topVulnerabilitiesByEpss":50,"kevVulnerabilities":110,"seoMetadata":111,"meta":130},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":37},"cisco","integrated_management_controller",11,12,0,"2021-05-06",[14,17,19,21,23,25,27,29,31,33,35],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"3.0\\(1c\\)",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"3.0\\(3e\\)",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"3.0\\(4q\\)",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"3.1",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.11.3",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"3.2\\(12.4\\)",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"4.0\\(1a\\)",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"4.0\\(2l\\)",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"4.0\\(4l\\)",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"4.1\\(1c\\)",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"4.1\\(1f\\)","Integrated Management Controller by Cisco is a technology product with 11 tracked versions and 12 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[39,40,41,42,43,44,45,46,47,48,49],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},[51,59,67,74,81,86,90,95,100,105],{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":16,"epssScore":58},"CVE-2020-3470","Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the API subsystem of an affected system. When this request is processed, an exploitable buffer overflow condition may occur. A successful exploit could allow the attacker to execute arbitrary code with root privileges on the underlying operating system (OS).","2020-11-18",9.8,"v3.1","Critical",0.04798,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":16,"epssScore":66},"CVE-2014-3348","The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.","2014-09-10",5,"v2","Medium",0.02584,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":72,"severity":65,"isKev":16,"epssScore":73},"CVE-2019-1631","A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow an attacker to view sensitive system data.","2019-06-20",5.3,"v3.0",0.02248,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":56,"severity":79,"isKev":16,"epssScore":80},"CVE-2020-3371","A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary code and execute arbitrary commands at the underlying operating system level. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to inject and execute arbitrary commands at the underlying operating system level.","2020-11-06",8.8,"High",0.01868,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":55,"cvssVersion":72,"severity":57,"isKev":16,"epssScore":85},"CVE-2018-15447","A vulnerability in the web framework code of Cisco Integrated Management Controller (IMC) Supervisor could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation of user-supplied input in SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected application.","2018-11-08",0.01731,{"cveId":87,"description":88,"publishedDate":70,"cvssScore":71,"cvssVersion":72,"severity":65,"isKev":16,"epssScore":89},"CVE-2019-1629","A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attacker could exploit this vulnerability by crafting a malicious file and uploading it to the affected device. An exploit could allow the attacker to fill up the filesystem or upload malicious scripts.",0.01516,{"cveId":91,"description":92,"publishedDate":70,"cvssScore":93,"cvssVersion":56,"severity":65,"isKev":16,"epssScore":94},"CVE-2019-1627","A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to gain unauthorized access to sensitive user information from the configuration data that is stored on the affected system. The vulnerability is due to insufficient protection of data in the configuration file. An attacker could exploit this vulnerability by downloading the configuration file. An exploit could allow the attacker to use the sensitive information from the file to elevate privileges.",6.5,0.01164,{"cveId":96,"description":97,"publishedDate":12,"cvssScore":98,"cvssVersion":56,"severity":65,"isKev":16,"epssScore":99},"CVE-2021-1397","A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website. This vulnerability is known as an open redirect attack, which is used in phishing attacks to get users to visit malicious sites without their knowledge.",6.1,0.00831,{"cveId":101,"description":102,"publishedDate":70,"cvssScore":103,"cvssVersion":72,"severity":79,"isKev":16,"epssScore":104},"CVE-2019-1632","A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to use a web browser and the privileges of the user to perform arbitrary actions on the affected device.",8,0.0054,{"cveId":106,"description":107,"publishedDate":70,"cvssScore":108,"cvssVersion":72,"severity":65,"isKev":16,"epssScore":109},"CVE-2019-1879","A vulnerability in the CLI of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient validation of user-supplied input at the CLI. An attacker could exploit this vulnerability by authenticating with the administrator password via the CLI of an affected device and submitting crafted input to the affected commands. A successful exploit could allow the attacker to execute arbitrary commands on the device with root privileges.",6.7,0.0042,[],{"title":112,"metaDescription":113,"keywords":114,"structuredData":115},"Integrated Management Controller by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Integrated Management Controller by Cisco covering 11 versions with 12 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Integrated Management Controller vulnerabilities, Integrated Management Controller security, Integrated Management Controller CVE, Cisco Integrated Management Controller, Integrated Management Controller threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":116,"@type":117,"name":118,"description":113,"url":119,"manufacturer":120,"applicationCategory":124,"softwareVersion":125,"mainEntity":126},"https:\u002F\u002Fschema.org","SoftwareApplication","Integrated Management Controller","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fintegrated_management_controller",{"@type":121,"name":122,"url":123},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","11 versions tracked",{"@type":127,"name":128,"description":129,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Integrated Management Controller Security Vulnerabilities","Security vulnerabilities affecting Integrated Management Controller by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":131,"apiVersion":132},"2026-10-18T22:15:17.181Z","3.0",{"rows":134,"total":11,"capped":16,"failed":11},[],[136],{"product":137,"cves":138},"integrated_management_controller_supervisor",27]