GCVE - cpe:2.3:h:cisco:hyperflex_hx220c_m5:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:hyperflex_hx220c_m5:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Hyperflex Hx220C M5 (`28ad1f22-364d-5f6d-b5c3-733247441137`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-1499`	not_vulnerable	2026-06-08 05:28:14.811963	Cisco HyperFlex HX Data Platform File Upload Vulnerability MEDIUM (5.3) A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit this vulnerability by sending a specific HTTP request to an affected device. A successful exploit could allow the attacker to upload files to the affected device with the permissions of the tomcat8 user. Published: 2021-05-06T12:41:36.460Z Updated: 2024-11-08T23:20:10.296Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-upload-KtCK8Ugz http://packetstormsecurity.com/files/163203/Cisco-HyperFlex-HX-Data-Platform-File-Upload-Remote-Code-Execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-1498`	not_vulnerable	2026-06-08 05:28:14.811300	Cisco HyperFlex HX Command Injection Vulnerabilities CRITICAL (9.8) Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2021-05-06T12:41:31.982Z Updated: 2025-10-21T23:25:47.170Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-rce-TjjNrkpR http://packetstormsecurity.com/files/162976/Cisco-HyperFlex-HX-Data-Platform-Command-Execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-1497`	not_vulnerable	2026-06-08 05:28:14.808870	Cisco HyperFlex HX Command Injection Vulnerabilities CRITICAL (9.8) Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2021-05-06T12:41:27.712Z Updated: 2025-10-21T23:25:47.305Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-rce-TjjNrkpR http://packetstormsecurity.com/files/162976/Cisco-HyperFlex-HX-Data-Platform-Command-Execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1975`	not_vulnerable	2026-06-08 05:13:30.312323	Cisco HyperFlex Software Cross-Frame Scripting Vulnerability MEDIUM (6.5) A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to an attacker-controlled web page that contains a malicious HTML iframe. A successful exploit could allow the attacker to conduct clickjacking or other clientside browser attacks. Published: 2019-09-18T16:15:13.502Z Updated: 2024-11-21T19:14:34.909Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190918-hyperflex-xfs	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12621`	not_vulnerable	2026-06-08 05:12:39.434384	Cisco HyperFlex Static SSL Key Vulnerability MEDIUM (6.8) A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to insufficient key management. An attacker could exploit this vulnerability by obtaining a specific encryption key for the cluster. A successful exploit could allow the attacker to perform a man-in-the-middle attack against other nodes in the cluster. Published: 2019-08-21T18:00:28.606Z Updated: 2024-11-20T17:12:58.199Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-hyperflex-sslkey	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12620`	not_vulnerable	2026-06-08 05:12:39.425013	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.