Advisories · Technology

Cisco Unified Computing System E-Series Software (UCSE).

Every CVE that names Cisco Unified Computing System E-Series Software (UCSE) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-20293 CVE record

CVSS 7.1 High

Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Managed)
- CWE-749
Not analysed yet 8 Sept 2026
CVE-2026-20288 CVE record

CVSS 6.5 Medium

Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- CWE-146
Not analysed yet 5 Aug 2026
CVE-2026-20198 CVE record

CVSS 4.8 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 5 Aug 2026
CVE-2026-20090 CVE record

CVSS 4.8 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2026-20089 CVE record

CVSS 4.8 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2026-20087 CVE record

CVSS 4.8 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2026-20088 CVE record

CVSS 4.8 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2026-20096 CVE record

CVSS 6.5 Medium

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Command injection
Not analysed yet 1 Apr 2026
CVE-2026-20094 CVE record

CVSS 8.8 High

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Unified Computing System (Standalone)
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 1 Apr 2026
CVE-2026-20095 CVE record

CVSS 6.5 Medium

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Command injection
Not analysed yet 1 Apr 2026
CVE-2026-20093 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Integrated Management Controller Authentication Bypass Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- CWE-20
Not analysed yet 1 Apr 2026
CVE-2026-20085 CVE record

CVSS 6.1 Medium

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2026
CVE-2025-20342 CVE record

CVSS 5.4 Medium

Cisco Integrated Management Controller Virtual Keyboard Video Monitor (vKVM) Stored Cross-Site Scripting Vulnerability
- Cisco Unified Computing System (Managed)
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 27 Aug 2025
CVE-2025-20317 CVE record

CVSS 7.1 High

Cisco UCS Virtual Keyboard Video Monitor (vKVM) Open Redirect Vulnerability
- Cisco Unified Computing System (Managed)
- Cisco Unified Computing System (Standalone)
- Open redirect
Not analysed yet 27 Aug 2025
CVE-2024-20295 CVE record

CVSS 8.8 High

OS command injection in Cisco Unified Computing System (Standalone) and others
- Cisco Unified Computing System (Standalone)
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 24 Apr 2024
CVE-2024-20356 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

OS command injection in Cisco Unified Computing System (Standalone) and others
- Cisco Unified Computing System (Standalone)
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 24 Apr 2024
CVE-2023-20228 CVE record

CVSS 6.1 Medium

Cross-site scripting in Cisco Identity Services Engine Software and others
- Cisco Identity Services Engine Software
- Cisco Unified Computing System (Standalone)
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2023
CVE-2019-1883 CVE record

CVSS 7.0 High

Cisco Integrated Management Controller CLI Command Injection Vulnerability
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 21 Aug 2019
CVE-2019-1896 CVE record

CVSS 7.2 High

Cisco Integrated Management Controller CSR Generation Command Injection Vulnerability
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 21 Aug 2019
CVE-2019-1863 CVE record

CVSS 6.5 Medium

Cisco Integrated Management Controller Privilege Escalation Vulnerability
- Cisco Unified Computing System E-Series Software (UCSE)
- Broken access control
Not analysed yet 21 Aug 2019
CVE-2019-1864 CVE record

CVSS 8.8 High

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 21 Aug 2019
CVE-2019-1865 CVE record

CVSS 8.8 High

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 21 Aug 2019
CVE-2019-1634 CVE record

CVSS 7.2 High

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 21 Aug 2019
CVE-2019-1850 CVE record

CVSS 7.2 High

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 21 Aug 2019
CVE-2018-0431 CVE record

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 5 Oct 2018
CVE-2018-0430 CVE record

Cisco Integrated Management Controller Command Injection Vulnerability
- Cisco Unified Computing System E-Series Software (UCSE)
- Command injection
Not analysed yet 5 Oct 2018