Cisco HyperFlex HX220C AF M5 Firmware 4.0(1a)
Approved changes feed: RSS · Atom
cpe:2.3:o:cisco:hyperflex_hx220c_af_m5_firmware:4.0\(1a\):*:*:*:*:*:*:*
part: o version: 4.0(1a) update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Hyperflex Hx220C Af M5 Firmware (1b7bb2b2-026a-5e30-9b52-5bd2080f8436) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1975 |
vulnerable | 2026-06-08 05:13:30.315261 |
Cisco HyperFlex Software Cross-Frame Scripting Vulnerability
MEDIUM (6.5)
A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to an attacker-controlled web page that contains a malicious HTML iframe. A successful exploit could allow the attacker to conduct clickjacking or other clientside browser attacks.
Published: 2019-09-18T16:15:13.502Z
Updated: 2024-11-21T19:14:34.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12620 |
vulnerable | 2026-06-08 05:12:39.428828 |
Cisco HyperFlex Software Counter Value Injection Vulnerability
MEDIUM (5.3)
A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could exploit this vulnerability by sending properly formatted data values to the statistics collection service of an affected device. A successful exploit could allow the attacker to cause the web interface statistics view to present invalid data to users.
Published: 2019-09-18T16:15:18.927Z
Updated: 2024-11-19T18:57:00.555Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.