Cisco Elastic Services Controller
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:cisco_elastic_services_controller:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Cisco Elastic Services Controller (6beca3e1-a8ec-52c9-a58f-a738b64ff1fa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-1312 |
vulnerable | 2026-06-08 05:28:13.152810 |
Cisco Elastic Services Controller Denial of Service Vulnerability
MEDIUM (5.3)
A vulnerability in the system resource management of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for the maximum number of TCP connections and SYN backlog. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow the attacker to block TCP listening ports that are used by the health monitor API. This vulnerability only affects customers who use the health monitor API.
Published: 2021-01-20T20:01:01.596Z
Updated: 2024-11-12T20:20:59.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1867 |
vulnerable | 2026-06-08 05:13:29.840340 |
Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability
CRITICAL (10)
A vulnerability in the REST API of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to bypass authentication on the REST API. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by sending a crafted request to the REST API. A successful exploit could allow the attacker to execute arbitrary actions through the REST API with administrative privileges on an affected system.
Published: 2019-05-10T12:05:18.232Z
Updated: 2024-11-19T19:07:39.653Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.