Summary
Ein Angreifer kann mehrere Schwachstellen in Cisco FXOS und Cisco Unified Computing System (UCS) ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode mit Administratorrechten auszuführen.
Product
FXOS (FirePOWER eXtensible Operating System) ist ein Betriebssystem für Cisco Firepower Appliances
Bei dem Cisco Unified Computing System (UCS) handelt es sich um eine Rechenzentrumsplattform, die Rechenleistung, Netzwerk, Storage-Zugriff und Virtualisierung in einem System zusammenführt.
Vulnerabilities 2
-
Medium 6.7
Cisco UCS Manager and FXOS Software Command Injection Vulnerability
A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to perform command injection attacks on an affected system and elevate…
-
Medium 4.8
Cisco UCS Manager and FXOS Software Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability…
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory cisco-sa-ucsfxosxss-7skVE8Zv vom 2026-02-25
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsfxosxss-7skVE8Zv
-
Cisco Security Advisory cisco-sa-ucsciv-wGYtC78q vom 2026-02-25
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsciv-wGYtC78q