# CVEs published 2013-09-24 9 CVEs were published on September 24, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-4078](https://cve.now/CVE-2012-4078.md): The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which… (no CVSS) - [CVE-2012-4085](https://cve.now/CVE-2012-4085.md): The Intelligent Platform Management Interface (IPMI) implementation in the Blade Management Controller in Cisco Unified Computing System… (no CVSS) - [CVE-2012-4087](https://cve.now/CVE-2012-4087.md): A cluster setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute… (no CVSS) - [CVE-2012-4089](https://cve.now/CVE-2012-4089.md): MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management… (no CVSS) - [CVE-2012-4094](https://cve.now/CVE-2012-4094.md): Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers… (no CVSS) - [CVE-2013-3589](https://cve.now/CVE-2013-3589.md): Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with… (no CVSS) - [CVE-2013-3616](https://cve.now/CVE-2013-3616.md): Cross-site scripting (XSS) vulnerability in the KnowledgeView Editorial and Management application allows remote attackers to inject… (no CVSS) - [CVE-2013-5221](https://cve.now/CVE-2013-5221.md): The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging… (no CVSS) - [CVE-2013-5911](https://cve.now/CVE-2013-5911.md): Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2013-09-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.