Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:ucs_director_express_for_big_data:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductUcs Director Express For Big Data (8e374780-d40a-5745-ad03-b2e0f0f62fd0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-3329 vulnerable 2026-06-08 05:25:54.741889 Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Role-Based Access Control Vulnerability
MEDIUM (4.3)
A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow a read-only authenticated, remote attacker to disable user accounts on an affected system. The vulnerability is due to incorrect allocation of the enable/disable action button under the role-based access control code on an affected system. An attacker could exploit this vulnerability by authenticating as a read-only user and then updating the roles of other users to disable them. A successful exploit could allow the attacker to disable users, including administrative users.
Published: 2020-05-06T16:40:52.049Z
Updated: 2024-11-15T17:26:11.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3252 vulnerable 2026-06-08 05:25:54.284388 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data
CRITICAL (9.8)
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2020-04-15T20:11:06.222Z
Updated: 2024-11-15T17:29:20.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3251 vulnerable 2026-06-08 05:25:54.283510 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data
CRITICAL (9.8)
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2020-04-15T20:11:01.832Z
Updated: 2024-11-15T17:29:36.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3250 vulnerable 2026-06-08 05:25:54.282307 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data
CRITICAL (9.8)
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2020-04-15T20:10:57.206Z
Updated: 2024-11-15T17:29:48.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3249 vulnerable 2026-06-08 05:25:54.280946 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data
CRITICAL (9.8)
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2020-04-15T20:10:52.560Z
Updated: 2024-11-15T17:30:00.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3248 vulnerable 2026-06-08 05:25:54.279566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3247 vulnerable 2026-06-08 05:25:54.278378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3243 vulnerable 2026-06-08 05:25:54.266695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3240 vulnerable 2026-06-08 05:25:54.260614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3239 vulnerable 2026-06-08 05:25:54.259146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1974 vulnerable 2026-06-08 05:13:30.308137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1937 vulnerable 2026-06-08 05:13:30.090312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12634 vulnerable 2026-06-08 05:12:39.515168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.