CVE Watch—

CVE-2021-1498

Cisco HyperFlex HX Data Platform Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

100.0%

p100

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 dias100.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Cisco / HyperFlex HX

Vulnerabilidade

Cisco HyperFlex HX Data Platform Command Injection Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

17 de nov. de 2021

Uso conhecido em ransomware

Não

Descrição resumida

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-1498

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2021-1497—

100.0%

KEV—80Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability—