Known vulnerabilities in UCS 6500 Series Fabric Interconnects

Vendor: Cisco Systems, Inc
Software: UCS 6500 Series Fabric Interconnects
Software CPE: cpe:2.3:h:cisco_systems:ucs_6500_series_fabric_interconnects:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting UCS 6500 Series Fabric Interconnects UCS 6500 Series Fabric Interconnects is affected by 10 known vulnerabilities: 2 medium, 8 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114566 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20292		 CWE-78 Low
No
No
 4.2(3p), 4.3(6a) 29.08.2025 SB2025082978
#VU114564 - Exposure of sensitive information to an unauthorized actor
CVE-2025-20290		 CWE-200 Low
No
No
 4.2(3p), 4.3(6c) 29.08.2025 SB2025082954
#VU114485 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20295		 CWE-78 Low
No
No
 - 28.08.2025 SB2025082817
#VU114484 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20294		 CWE-78 Low
No
No
 - 28.08.2025 SB2025082817
#VU114483 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20296		 CWE-79 Low
No
No
 - 28.08.2025 SB2025082816
#VU86915 - Memory corruption
CVE-2024-20294		 CWE-119 Medium
No
No
 4.1(3m), 4.2(3j), 4.3(2b) 29.02.2024 SB2024022925
SB2024061419
SB2024061703
and 1 more
#VU86910 - Resource exhaustion
CVE-2024-20344		 CWE-400 Medium
No
No
 - 29.02.2024 SB2024022907
#VU72513 - Key Management Errors
CVE-2023-20016		 CWE-320 Low
No
No
 - 23.02.2023 SB2023022317
#VU72511 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20015		 CWE-78 Low
No
No
 - 23.02.2023 SB2023022311
#VU72510 - Improper Authentication
CVE-2023-20012		 CWE-287 Low
No
No
 - 23.02.2023 SB2023022310