Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-20053

A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack agains

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Nexus Dashboard

  • 1.1(0c)affected
  • 1.1(0d)affected
  • 1.1(2h)affected
  • 1.1(2i)affected
  • 1.1(3c)affected
  • 1.1(3d)affected
  • 1.1(3e)affected
  • 1.1(3f)affected
  • 2.0(1b)affected
  • 2.0(1d)affected
  • 2.0(2g)affected
  • 2.0(2h)affected
  • 2.1(1d)affected
  • 2.1(1e)affected
  • 2.1(2d)affected
  • 2.1(2f)affected
  • 2.2(1e)affected
  • 2.2(1h)affected
  • 2.2(2d)affected

References