CVE-2016-1374

Published: Jul 28, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827.

Affected (4)

Products: Cisco: Unified Computing System Performance Manager

Cisco

1 product

Unified Computing System Performance Manager

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Computing System Performance Manager	Version 1.0_base
Cisco Unified Computing System Performance Manager	Version 1.1.0
Cisco Unified Computing System Performance Manager	Version 1.1.1
Cisco Unified Computing System Performance Manager	Version 2.0.0