Cisco Cisco Unified Computing System E-Series Software (UCSE)

• CVE-2026-20293 High 7.1 Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability 0.2%
• CVE-2026-20288 Medium 6.5 Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability 0.6%
• CVE-2026-20198 Medium 4.8 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability 0.3%
• CVE-2026-20090 Medium 4.8 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability 0.2%
• CVE-2026-20089 Medium 4.8 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability 0.2%
• CVE-2026-20087 Medium 4.8 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability 0.2%
• CVE-2026-20088 Medium 4.8 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability 0.2%
• CVE-2026-20096 Medium 6.5 Cisco Integrated Management Controller Command Injection Vulnerability 0.7%
• CVE-2026-20094 High 8.8 Cisco Integrated Management Controller Command Injection Vulnerability 1.1%
• CVE-2026-20095 Medium 6.5 Cisco Integrated Management Controller Command Injection Vulnerability 0.9%
• CVE-2026-20093 Critical 9.8 Cisco Integrated Management Controller Authentication Bypass Vulnerability 1.0%
• CVE-2026-20085 Medium 6.1 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability 0.2%
• CVE-2025-20342 Medium 5.4 Cisco Integrated Management Controller Virtual Keyboard Video Monitor (vKVM) Stored Cross-Site Scripting Vulnerability 0.2%
• CVE-2025-20317 High 7.1 Cisco UCS Virtual Keyboard Video Monitor (vKVM) Open Redirect Vulnerability 0.4%
• CVE-2024-20295 High 8.8 A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and 1.6%
• CVE-2024-20356 High 8.7 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform comma 29.6%
• CVE-2023-20228 Medium 6.1 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack aga 0.5%