Skip to content
OpenAdvisories

Product · Cisco

Cisco HyperFlex HX-Series

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-12620

    Cisco HyperFlex Software Counter Value Injection Vulnerability

    A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics colle…

    Cisco Cisco HyperFlex HX-Series Network devices
  • Medium 6.5
    CVE-2019-1975

    Cisco HyperFlex Software Cross-Frame Scripting Vulnerability

    A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An …

    Cisco Cisco HyperFlex HX-Series Network devices
  • Medium 6.8
    CVE-2019-12621

    Cisco HyperFlex Static SSL Key Vulnerability

    A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to insufficient key management. An attacker could exploit this vulnerability by obtaining a specific en…

    Cisco Cisco HyperFlex HX-Series Network devices
  • Medium 5.4
    CVE-2019-1958

    Cisco HyperFlex Software Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protec…

    Cisco Cisco HyperFlex HX-Series Network devices
  • Medium 6.1
    CVE-2019-1857

    Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco HyperFlex HX-Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is …

    Cisco Cisco HyperFlex HX-Series Network devices
  • Medium 4.0
    CVE-2019-1667

    Cisco HyperFlex Arbitrary Statistics Write Vulnerability

    A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local attacker to write arbitrary data to the Graphite interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit th…

    Cisco Cisco HyperFlex HX-Series Network devices
  • Medium 5.3
    CVE-2019-1666

    Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability

    A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to retrieve data from the Graphite service. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vu…

    Cisco Cisco HyperFlex HX-Series Network devices
  • Medium 4.7
    CVE-2019-1665

    Cisco Hyperflex Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vu…

    Cisco Cisco HyperFlex HX-Series Network devices