# CVEs published 2013-09-24 9 CVEs were published on September 24, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-4078](https://cve.now/CVE-2012-4078.md): The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allow (no CVSS) - [CVE-2012-4085](https://cve.now/CVE-2012-4085.md): The Intelligent Platform Management Interface (IPMI) implementation in the Blade Management Controller in Cisco Unified Computing System (UC (no CVSS) - [CVE-2012-4087](https://cve.now/CVE-2012-4087.md): A cluster setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary (no CVSS) - [CVE-2012-4089](https://cve.now/CVE-2012-4089.md): MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Cont (no CVSS) - [CVE-2012-4094](https://cve.now/CVE-2012-4094.md): Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to (no CVSS) - [CVE-2013-3589](https://cve.now/CVE-2013-3589.md): Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmwa (no CVSS) - [CVE-2013-3616](https://cve.now/CVE-2013-3616.md): Cross-site scripting (XSS) vulnerability in the KnowledgeView Editorial and Management application allows remote attackers to inject arbitra (no CVSS) - [CVE-2013-5221](https://cve.now/CVE-2013-5221.md): The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging ( (no CVSS) - [CVE-2013-5911](https://cve.now/CVE-2013-5911.md): Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrar (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-09-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.