What’s Vulnerable › Products

Cisco Integrated Management Controller vulnerabilities

27 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Cisco Integrated Management Controller version is affected

Exploited Cisco Integrated Management Controller vulnerabilities

• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability

Latest Cisco Integrated Management Controller vulnerabilities

• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability (CVSS 10.0) — exploited
• CVE-2020-3329 — Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Role-Based Access Control Vulnerability (CVSS 4.3)
• CVE-2019-1974 — Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability (CVSS 9.8)
• CVE-2019-1937 — Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability (CVSS 9.8)
• CVE-2019-1936 — Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Command Injection Vulnerability (CVSS 7.2)
• CVE-2019-1935 — Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability (CVSS 9.8)
• CVE-2019-1908 — Cisco Integrated Management Controller Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2019-1907 — Cisco Integrated Management Controller Substring Comparison Privilege Escalation Vulnerability (CVSS 8.8)
• CVE-2019-1900 — Cisco Integrated Management Controller Unauthenticated Denial of Service Vulnerability (CVSS 7.5)
• CVE-2019-1896 — Cisco Integrated Management Controller CSR Generation Command Injection Vulnerability (CVSS 7.2)
• CVE-2019-1885 — Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 7.2)
• CVE-2019-1883 — Cisco Integrated Management Controller CLI Command Injection Vulnerability (CVSS 7.8)
• CVE-2019-1871 — Cisco Integrated Management Controller Buffer Overflow Vulnerability (CVSS 7.2)
• CVE-2019-1865 — Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 8.8)
• CVE-2019-1864 — Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 8.8)
• CVE-2019-1863 — Cisco Integrated Management Controller Privilege Escalation Vulnerability (CVSS 8.1)
• CVE-2019-1850 — Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 7.2)
• CVE-2019-1634 — Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 7.2)
• CVE-2019-12634 — Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Denial of Service Vulnerability (CVSS 7.5)
• CVE-2018-15404 — Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability (CVSS 6.5)
• CVE-2018-0149 — (CVSS 4.8)
• CVE-2017-6619 — (CVSS 8.8)
• CVE-2017-6618 — (CVSS 5.4)
• CVE-2017-6617 — (CVSS 5.4)
• CVE-2017-6616 — (CVSS 8.8)