Known vulnerabilities in Cisco Integrated Management Controller

Software CPE: cpe:2.3:a:cisco_systems:cisco_integrated_management_controller:*:*:*:*:*:*:*:*
Total vulnerabilities: 27
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Integrated Management Controller Cisco Integrated Management Controller is affected by 27 known vulnerabilities: 3 high, 16 medium, 8 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114565 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20342
CWE-79 Low
No
No
- 29.08.2025 SB2025082977
#VU114490 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-20317
CWE-601 Medium
No
No
4.3(5.250001), 4.3(5.250030), 4.3(5.250033), 4.3(6.250053) 28.08.2025 SB2025082828
#VU110234 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-20261
CWE-923 Medium
No
No
4.2(2f) 06.06.2025 SB2025060637
#VU88806 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20295
CWE-78 Low
No
No
3.2.15, 4.1(2m), 4.1(3m), 4.2(3j), 4.3(2.240002), 4.12.2 18.04.2024 SB2024041818
#VU88805 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20356
CWE-78 Low
Available
No
3.2.15.3, 4.1(3n), 4.2(3j), 4.2(3k), 4.3(2.240009), 4.3(3.240022), 4.3(3.240041) 18.04.2024 SB2024041816
#VU79943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20228
CWE-79 Low
No
No
- 24.08.2023 SB2023082424
#VU57595 - Improper input validation
CVE-2021-34736
CWE-20 Medium
No
No
- 21.10.2021 SB2021102135
#VU52963 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-1397
CWE-601 Medium
No
No
3.2.12.4 07.05.2021 SB2021050705
#VU48561 - Memory corruption
CVE-2020-3470
CWE-119 High
No
No
- 18.11.2020 SB2020111907
#VU48159 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26062
CWE-200 Medium
No
No
4.1.2b IMC, 4.1.2b UCSM 05.11.2020 SB2020110539
#VU48158 - Improper Privilege Management
CVE-2020-26063
CWE-269 Medium
No
No
4.1.2b IMC, 4.1.2b UCSM 05.11.2020 SB2020110539
#VU48157 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-3371
CWE-78 Medium
No
No
3.0.3e 05.11.2020 SB2020110538
#VU20453 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-1634
CWE-78 Medium
No
No
1.5.9g, 2.0.13o, 3.0.4k, 4.0.2f, 4.0.4b 29.08.2019 SB2019082810
#VU20452 - Improper Authorization
CVE-2019-1863
CWE-285 Medium
No
No
1.5.9g, 2.0.13o, 3.0.4k, 4.0.1d, 4.0.2c, 4.0.4b 29.08.2019 SB2019082810
#VU20451 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-1865
CWE-78 High
No
No
1.5.9g, 2.0.13o, 3.0.4k, 4.0.1d, 4.0.2c, 4.0.4b 29.08.2019 SB2019082810
#VU20450 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-1896
CWE-78 Medium
No
No
2.0.13o, 3.0.4k, 4.0.2f, 4.0.4b 29.08.2019 SB2019082810
#VU20449 - NULL Pointer Dereference
CVE-2019-1900
CWE-476 Medium
No
No
4.0.2f 29.08.2019 SB2019082810
#VU20448 - Improper Authorization
CVE-2019-1907
CWE-285 High
No
No
4.0.2f, 4.0.4b 29.08.2019 SB2019082810
#VU20447 - Exposure of sensitive information to an unauthorized actor
CVE-2019-1908
CWE-200 Medium
No
No
2.0.13o, 3.0.4k, 4.0.2f, 4.0.4b 29.08.2019 SB2019082810
#VU20380 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-1885
CWE-78 Medium
No
No
3.0.4k, 4.0.2f, 4.0.4b 23.08.2019 SB2019082810


Showing elements 1 - 20 out of 27