Cisco Cisco HyperFlex HX-Series
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-12620 | unspecified – < 3.5.2f | Cisco HyperFlex Software Counter Value Injection Vulnerability | MEDIUM 5.3 | 0.7 % | ||
| CVE-2019-1975 | unspecified – < 3.5.2f | Cisco HyperFlex Software Cross-Frame Scripting Vulnerability | MEDIUM 6.5 | 1.2 % | ||
| CVE-2019-12621 | unspecified – < 4.0(1a) | Cisco HyperFlex Static SSL Key Vulnerability | HIGH 7.4 | 0.4 % | ||
| CVE-2019-1958 | unspecified – < n/a | Cisco HyperFlex Software Cross-Site Request Forgery Vulnerability | HIGH 8.8 | 0.6 % | ||
| CVE-2019-1857 | unspecified – < 4.0(1a) | Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability | HIGH 8.8 | 0.6 % | ||
| CVE-2019-1667 | unspecified – < 3.5(2a) | Cisco HyperFlex Arbitrary Statistics Write Vulnerability | MEDIUM 4.0 | 0.2 % | ||
| CVE-2019-1666 | unspecified – < 3.5(2a) | Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability | MEDIUM 5.3 | 2.2 % | ||
| CVE-2019-1665 | unspecified – < 3.5(1a) | Cisco Hyperflex Stored Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.1 % | ||
| CVE-2019-1664 | unspecified – < 3.5(2a) | Cisco HyperFlex Software Unauthenticated Root Access Vulnerability | HIGH 8.1 | 0.3 % | ||
| CVE-2018-15380 | unspecified – < 3.5(2a) | Cisco HyperFlex Software Command Injection Vulnerability | HIGH 8.8 | 1.1 % | ||
| CVE-2018-15423 | n/a | Cisco HyperFlex UI Clickjacking Vulnerability | MEDIUM 4.7 | 0.9 % | ||
| CVE-2018-15407 | n/a | Cisco HyperFlex World-Readable Sensitive Information Vulnerability | MEDIUM 5.5 | 0.3 % | ||
| CVE-2018-15382 | n/a | Cisco HyperFlex Software Static Signing Key Vulnerability | HIGH 8.6 | 1.3 % |