[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fg8PxGQP725iGrzokgHl4Bd4wo2kCWElzgQ6-2sQ979g":3,"g5a-family:cisco\u002Fucs_director":357,"g5a-ex:cisco\u002Fucs_director@*":361},{"success":4,"data":5},true,{"product":6,"versions":195,"topVulnerabilitiesByEpss":283,"kevVulnerabilities":330,"seoMetadata":335,"meta":354},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":194},"cisco","ucs_director",87,26,1,"2022-05-27",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,121,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,157,159,161,163,165,167,170,172,174,176,178,180,182,184,186,188,190,192],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"2.1\\(0.0\\)",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"3.7.1.0",{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},"4.0.0.0",{"version":23,"cve_count":11,"kev_count":16,"has_kev":17},"4.0.0.1",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"4.0.0.2",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"4.0.0.3",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"4.0.1.1",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"4.0.1.2",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.0.0",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.0.1",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.0.2",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.0.2a",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.0.3",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.0.3a",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.0.3b",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.0.4",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.0.5",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.0.0",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.0.1",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.0.2",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.0.3",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.2.3",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.0.0",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.0.1",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.0.1a",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.0.1b",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.0.1c",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.0.0",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.0.1",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.0.2",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.0.2a",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.0.0",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.0.1",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.0.2",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.1.0",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.1.1",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.1.2",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.2.0",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.2.1",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.2.2",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.2.3",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.2.4",{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.0.0",{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.0.1",{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.0.2",{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.0.3",{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.0.4",{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},"5.5.0.0",{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},"5.5.0.1",{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},"5.5.0.2",{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},"6.0",{"version":119,"cve_count":120,"kev_count":16,"has_kev":17},"6.0.0.0",11,{"version":122,"cve_count":123,"kev_count":16,"has_kev":17},"6.0.0.1",9,{"version":125,"cve_count":123,"kev_count":16,"has_kev":17},"6.0.1.0",{"version":127,"cve_count":16,"kev_count":16,"has_kev":17},"6.0\\(1.0\\)",{"version":129,"cve_count":123,"kev_count":16,"has_kev":17},"6.0.1.1",{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},"6.0\\(1.1\\)",{"version":133,"cve_count":123,"kev_count":16,"has_kev":17},"6.0.1.2",{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},"6.0\\(1.2\\)",{"version":137,"cve_count":123,"kev_count":16,"has_kev":17},"6.0.1.3",{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},"6.0\\(1.3\\)",{"version":141,"cve_count":120,"kev_count":16,"has_kev":17},"6.5.0.0",{"version":143,"cve_count":11,"kev_count":16,"has_kev":17},"6.5\\(0.0.65832\\)",{"version":145,"cve_count":123,"kev_count":16,"has_kev":17},"6.5.0.1",{"version":147,"cve_count":123,"kev_count":16,"has_kev":17},"6.5.0.2",{"version":149,"cve_count":123,"kev_count":16,"has_kev":17},"6.5.0.3",{"version":151,"cve_count":123,"kev_count":16,"has_kev":17},"6.5.0.4",{"version":153,"cve_count":11,"kev_count":16,"has_kev":17},"6.6",{"version":155,"cve_count":156,"kev_count":16,"has_kev":17},"6.6.0.0",12,{"version":158,"cve_count":156,"kev_count":16,"has_kev":17},"6.6.1.0",{"version":160,"cve_count":11,"kev_count":16,"has_kev":17},"6.6\\(1.0\\)",{"version":162,"cve_count":123,"kev_count":16,"has_kev":17},"6.6.2.0",{"version":164,"cve_count":16,"kev_count":16,"has_kev":17},"6.7",{"version":166,"cve_count":156,"kev_count":16,"has_kev":17},"6.7.0.0",{"version":168,"cve_count":169,"kev_count":16,"has_kev":17},"6.7\\(0.0.67265\\)",3,{"version":171,"cve_count":156,"kev_count":16,"has_kev":17},"6.7.1.0",{"version":173,"cve_count":16,"kev_count":16,"has_kev":17},"6.7\\(1.0\\)",{"version":175,"cve_count":11,"kev_count":16,"has_kev":17},"6.7\\(1.1\\)",{"version":177,"cve_count":123,"kev_count":16,"has_kev":17},"6.7.2.0",{"version":179,"cve_count":11,"kev_count":16,"has_kev":17},"6.7\\(2.0\\)",{"version":181,"cve_count":16,"kev_count":16,"has_kev":17},"6.7\\(2.2.67425\\)",{"version":183,"cve_count":123,"kev_count":16,"has_kev":17},"6.7.3.0",{"version":185,"cve_count":16,"kev_count":16,"has_kev":17},"6.7\\(3.0\\)",{"version":187,"cve_count":16,"kev_count":16,"has_kev":17},"6.7.3.1",{"version":189,"cve_count":16,"kev_count":16,"has_kev":17},"6.7.4.0",{"version":191,"cve_count":16,"kev_count":16,"has_kev":17},"6.7.4.1",{"version":193,"cve_count":16,"kev_count":16,"has_kev":17},"6.8.2.0","Ucs Director by Cisco is a technology product with 87 tracked versions and 26 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},{"version":23,"cve_count":11,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},{"version":119,"cve_count":120,"kev_count":16,"has_kev":17},{"version":122,"cve_count":123,"kev_count":16,"has_kev":17},{"version":125,"cve_count":123,"kev_count":16,"has_kev":17},{"version":127,"cve_count":16,"kev_count":16,"has_kev":17},{"version":129,"cve_count":123,"kev_count":16,"has_kev":17},{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},{"version":133,"cve_count":123,"kev_count":16,"has_kev":17},{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},{"version":137,"cve_count":123,"kev_count":16,"has_kev":17},{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},{"version":141,"cve_count":120,"kev_count":16,"has_kev":17},{"version":143,"cve_count":11,"kev_count":16,"has_kev":17},{"version":145,"cve_count":123,"kev_count":16,"has_kev":17},{"version":147,"cve_count":123,"kev_count":16,"has_kev":17},{"version":149,"cve_count":123,"kev_count":16,"has_kev":17},{"version":151,"cve_count":123,"kev_count":16,"has_kev":17},{"version":153,"cve_count":11,"kev_count":16,"has_kev":17},{"version":155,"cve_count":156,"kev_count":16,"has_kev":17},{"version":158,"cve_count":156,"kev_count":16,"has_kev":17},{"version":160,"cve_count":11,"kev_count":16,"has_kev":17},{"version":162,"cve_count":123,"kev_count":16,"has_kev":17},{"version":164,"cve_count":16,"kev_count":16,"has_kev":17},{"version":166,"cve_count":156,"kev_count":16,"has_kev":17},{"version":168,"cve_count":169,"kev_count":16,"has_kev":17},{"version":171,"cve_count":156,"kev_count":16,"has_kev":17},{"version":173,"cve_count":16,"kev_count":16,"has_kev":17},{"version":175,"cve_count":11,"kev_count":16,"has_kev":17},{"version":177,"cve_count":123,"kev_count":16,"has_kev":17},{"version":179,"cve_count":11,"kev_count":16,"has_kev":17},{"version":181,"cve_count":16,"kev_count":16,"has_kev":17},{"version":183,"cve_count":123,"kev_count":16,"has_kev":17},{"version":185,"cve_count":16,"kev_count":16,"has_kev":17},{"version":187,"cve_count":16,"kev_count":16,"has_kev":17},{"version":189,"cve_count":16,"kev_count":16,"has_kev":17},{"version":191,"cve_count":16,"kev_count":16,"has_kev":17},{"version":193,"cve_count":16,"kev_count":16,"has_kev":17},[284,292,298,303,308,311,314,319,322,325],{"cveId":285,"description":286,"publishedDate":287,"cvssScore":288,"cvssVersion":289,"severity":290,"isKev":4,"epssScore":291},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10",10,"v3.1","Critical",0.99999,{"cveId":293,"description":294,"publishedDate":295,"cvssScore":296,"cvssVersion":289,"severity":290,"isKev":17,"epssScore":297},"CVE-2020-3243","Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.","2020-04-15",9.8,0.88374,{"cveId":299,"description":300,"publishedDate":301,"cvssScore":296,"cvssVersion":289,"severity":290,"isKev":17,"epssScore":302},"CVE-2019-1935","A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which has default user credentials. The vulnerability is due to the presence of a documented default account with an undocumented default password and incorrect permission settings for that account. Changing the default password for this account is not enforced during the installation of the product. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the scpuser account. This includes full read and write access to the system's database.","2019-08-21",0.83386,{"cveId":304,"description":305,"publishedDate":301,"cvssScore":296,"cvssVersion":306,"severity":290,"isKev":17,"epssScore":307},"CVE-2019-1937","A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token with administrator privileges, bypassing user authentication. The vulnerability is due to insufficient request header validation during the authentication process. An attacker could exploit this vulnerability by sending a series of malicious requests to an affected device. An exploit could allow the attacker to use the acquired session token to gain full administrator access to the affected device.","v3.0",0.75863,{"cveId":309,"description":294,"publishedDate":295,"cvssScore":296,"cvssVersion":289,"severity":290,"isKev":17,"epssScore":310},"CVE-2020-3247",0.75573,{"cveId":312,"description":294,"publishedDate":295,"cvssScore":296,"cvssVersion":289,"severity":290,"isKev":17,"epssScore":313},"CVE-2020-3248",0.74438,{"cveId":315,"description":294,"publishedDate":295,"cvssScore":316,"cvssVersion":289,"severity":317,"isKev":17,"epssScore":318},"CVE-2020-3239",8.8,"High",0.73566,{"cveId":320,"description":294,"publishedDate":295,"cvssScore":316,"cvssVersion":289,"severity":317,"isKev":17,"epssScore":321},"CVE-2020-3251",0.61516,{"cveId":323,"description":294,"publishedDate":295,"cvssScore":296,"cvssVersion":289,"severity":290,"isKev":17,"epssScore":324},"CVE-2020-3250",0.60947,{"cveId":326,"description":327,"publishedDate":301,"cvssScore":328,"cvssVersion":289,"severity":317,"isKev":17,"epssScore":329},"CVE-2019-1936","A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attacker to execute arbitrary commands on the underlying Linux shell as the root user. Exploitation of this vulnerability requires privileged access to an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by logging in to the web-based management interface with administrator privileges and then sending a malicious request to a certain part of the interface.",7.2,0.39475,[331],{"cveId":285,"description":286,"publishedDate":287,"cvssScore":288,"severity":290,"isKev":4,"epssScore":291,"cisaVulnName":332,"cisaDateAdded":287,"cisaShortDescription":333,"cisaRequiredAction":334},"Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"title":336,"metaDescription":337,"keywords":338,"structuredData":339},"Ucs Director by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ucs Director by Cisco covering 87 versions with 26 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Ucs Director vulnerabilities, Ucs Director security, Ucs Director CVE, Cisco Ucs Director, Ucs Director threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Ucs Director KEV, Ucs Director exploited vulnerabilities",{"@context":340,"@type":341,"name":342,"description":337,"url":343,"manufacturer":344,"applicationCategory":348,"softwareVersion":349,"mainEntity":350},"https:\u002F\u002Fschema.org","SoftwareApplication","Ucs Director","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fucs_director",{"@type":345,"name":346,"url":347},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","87 versions tracked",{"@type":351,"name":352,"description":353,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Ucs Director Security Vulnerabilities","Security vulnerabilities affecting Ucs Director by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":355,"apiVersion":356},"2026-10-19T00:42:11.720Z","3.0",[358],{"product":359,"cves":360},"ucs_director_express_for_big_data",16,{"rows":362,"total":11,"capped":17,"failed":16},[363],{"cveId":285,"name":332,"severity":290,"cvss":288,"added":287,"epss":291,"published":364,"ranges":365,"checked":4,"hits":367,"covers":17},"2021-12-10T10:15:09.143",[366],"before 6.8.2.0",[]]