CVE-2015-6259: cisco integrated_management_controller_supervisor Improper Input Validation
Vulnerability summary
CVE-2015-6259 is a high (CVSS 9.4) Improper Input Validation vulnerability in cisco integrated_management_controller_supervisor. EPSS estimates a 2.82% chance of exploitation in the next 30 days, higher than 86.3% of scored vulnerabilities.
Timeline
- 04-09-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers to write to arbitrary files via crafted HTTP requests, aka Bug IDs CSCus36435 and CSCus62625.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.82%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
0.00 pp
From 2.82% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco2 products
- integrated_management_controller_supervisor≤ 1.0.0.0
- unified_computing_system_director3.4_base | 4.0_base | 4.1_base | 5.0.0.0 | 5.0.0.1 | 5.0.0.2 | 5.0.0.3 | 5.1.0.0 | 5.1.0.1 | ≤ 5.2.0.0
1 vendor · 2 products
References
2 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcsVendor AdvisoryX Refsource CISCO