Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:hyperflex_hx220c_all_nvme_m5:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductHyperflex Hx220C All Nvme M5 (0f274cba-56ba-535b-a835-099adc8dd2f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-1499 not_vulnerable 2026-06-08 05:28:14.811928 Cisco HyperFlex HX Data Platform File Upload Vulnerability
MEDIUM (5.3)
A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit this vulnerability by sending a specific HTTP request to an affected device. A successful exploit could allow the attacker to upload files to the affected device with the permissions of the tomcat8 user.
Published: 2021-05-06T12:41:36.460Z
Updated: 2024-11-08T23:20:10.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-1498 not_vulnerable 2026-06-08 05:28:14.811263 Cisco HyperFlex HX Command Injection Vulnerabilities
CRITICAL (9.8)
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2021-05-06T12:41:31.982Z
Updated: 2025-10-21T23:25:47.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-1497 not_vulnerable 2026-06-08 05:28:14.807421 Cisco HyperFlex HX Command Injection Vulnerabilities
CRITICAL (9.8)
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2021-05-06T12:41:27.712Z
Updated: 2025-10-21T23:25:47.305Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.