9.4
CVE-2015-6259
- EPSS 2.82%
- Veröffentlicht 04.09.2015 01:59:02
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginThe JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers to write to arbitrary files via crafted HTTP requests, aka Bug IDs CSCus36435 and CSCus62625.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Integrated Management Controller Supervisor Version <= 1.0.0.0
Cisco ≫ Unified Computing System Director Version <= 5.2.0.0
Cisco ≫ Unified Computing System Director Version 3.4_base
Cisco ≫ Unified Computing System Director Version 4.0_base
Cisco ≫ Unified Computing System Director Version 4.1_base
Cisco ≫ Unified Computing System Director Version 5.0.0.0
Cisco ≫ Unified Computing System Director Version 5.0.0.1
Cisco ≫ Unified Computing System Director Version 5.0.0.2
Cisco ≫ Unified Computing System Director Version 5.0.0.3
Cisco ≫ Unified Computing System Director Version 5.1.0.0
Cisco ≫ Unified Computing System Director Version 5.1.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.82% | 0.847 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.4 | 10 | 9.2 |
AV:N/AC:L/Au:N/C:N/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs
http://www.securitytracker.com/id/1033451