Known vulnerabilities in Cisco Unified Computing System (UCS)

Software CPE: cpe:2.3:a:cisco_systems:cisco_unified_computing_system:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Unified Computing System (UCS) Cisco Unified Computing System (UCS) is affected by 14 known vulnerabilities: 1 critical, 2 medium, 11 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20088
CWE-79 Low
No
No
4.3(6f), 6.0(2b) 01.04.2026 SB2026040174
#VU124796 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20089
CWE-79 Low
No
No
4.3(6f), 6.0(2b) 01.04.2026 SB2026040174
#VU124797 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20090
CWE-79 Low
No
No
4.3(6f), 6.0(2b) 01.04.2026 SB2026040174
#VU124794 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20087
CWE-79 Low
No
No
4.3(6f), 6.0(2b) 01.04.2026 SB2026040174
#VU124793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20085
CWE-79 Low
No
No
4.3(6f), 6.0(2b) 01.04.2026 SB2026040174
#VU124792 - Missing Authorization
CVE-2026-20093
CWE-862 Critical
No
No
4.3(6f), 6.0(1d), 6.0(2b) 01.04.2026 SB2026040173
#VU124791 - Out-of-bounds write
CVE-2026-20097
CWE-787 Low
No
No
4.3(6f), 6.0(2b) 01.04.2026 SB2026040172
#VU124790 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-20094
CWE-78 Medium
No
No
4.3(6f), 6.0(2b) 01.04.2026 SB2026040172
#VU124789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-20096
CWE-78 Low
No
No
4.3(6f), 6.0(2b) 01.04.2026 SB2026040172
#VU124788 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-20095
CWE-78 Low
No
No
4.3(6f), 6.0(2b) 01.04.2026 SB2026040172
#VU110234 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-20261
CWE-923 Medium
No
No
4.1(3n), 4.2.2c, 4.2.3b, 4.3(4c) 06.06.2025 SB2025060637
#VU50316 - Improper Certificate Validation
CVE-2021-1354
CWE-295 Low
No
No
2.0.1m 04.02.2021 SB2021020404
#VU20444 - Permissions, Privileges, and Access Controls
CVE-2019-1966
CWE-264 Low
No
No
4.0.2a 28.08.2019 SB2019082815
#VU13231 - Command injection
CVE-2018-0338
CWE-77 Low
No
No
3.2.3a 06.06.2018 SB2018060722