CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3240

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.389

EPSS Ranking 97.1%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 8.5

References

Products affected by CVE-2020-3240

Cisco » Ucs Director » Version: 6.0.0.0

cpe:2.3:a:cisco:ucs_director:6.0.0.0
Cisco » Ucs Director » Version: 6.0.0.1

cpe:2.3:a:cisco:ucs_director:6.0.0.1
Cisco » Ucs Director » Version: 6.0.1.0

cpe:2.3:a:cisco:ucs_director:6.0.1.0
Cisco » Ucs Director » Version: 6.0.1.1

cpe:2.3:a:cisco:ucs_director:6.0.1.1
Cisco » Ucs Director » Version: 6.0.1.2

cpe:2.3:a:cisco:ucs_director:6.0.1.2
Cisco » Ucs Director » Version: 6.0.1.3

cpe:2.3:a:cisco:ucs_director:6.0.1.3
Cisco » Ucs Director » Version: 6.5.0.0

cpe:2.3:a:cisco:ucs_director:6.5.0.0
Cisco » Ucs Director » Version: 6.5.0.1

cpe:2.3:a:cisco:ucs_director:6.5.0.1
Cisco » Ucs Director » Version: 6.5.0.2

cpe:2.3:a:cisco:ucs_director:6.5.0.2
Cisco » Ucs Director » Version: 6.5.0.3

cpe:2.3:a:cisco:ucs_director:6.5.0.3
Cisco » Ucs Director » Version: 6.5.0.4

cpe:2.3:a:cisco:ucs_director:6.5.0.4
Cisco » Ucs Director » Version: 6.6.0.0

cpe:2.3:a:cisco:ucs_director:6.6.0.0
Cisco » Ucs Director » Version: 6.6.1.0

cpe:2.3:a:cisco:ucs_director:6.6.1.0
Cisco » Ucs Director » Version: 6.6.2.0

cpe:2.3:a:cisco:ucs_director:6.6.2.0
Cisco » Ucs Director » Version: 6.7.0.0

cpe:2.3:a:cisco:ucs_director:6.7.0.0
Cisco » Ucs Director » Version: 6.7.1.0

cpe:2.3:a:cisco:ucs_director:6.7.1.0
Cisco » Ucs Director » Version: 6.7.2.0

cpe:2.3:a:cisco:ucs_director:6.7.2.0
Cisco » Ucs Director » Version: 6.7.3.0

cpe:2.3:a:cisco:ucs_director:6.7.3.0
Cisco » Ucs Director Express For Big Data » Version: 2.0.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.0.0.0
Cisco » Ucs Director Express For Big Data » Version: 2.1.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.1.0.0
Cisco » Ucs Director Express For Big Data » Version: 2.1.0.2

cpe:2.3:a:cisco:ucs_director_express_for_big_data:2.1.0.2
Cisco » Ucs Director Express For Big Data » Version: 3.0.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.0.1.3

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.1.3
Cisco » Ucs Director Express For Big Data » Version: 3.5.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.5.0.3

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.3
Cisco » Ucs Director Express For Big Data » Version: 3.6.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.6.1.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.1.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.0.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.0.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.1.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.1.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.2.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.2.0
Cisco » Ucs Director Express For Big Data » Version: 3.7.3.0

cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3240

Products

Pricing

Contact Us