Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-20228

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduct a cross-site script

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Identity Services Engine Software

  • N/Aaffected

Cisco Cisco Unified Computing System (Standalone)

  • 3.1(1d)affected
  • 3.1(2b)affected
  • 3.1(2c)affected
  • 3.1(2d)affected
  • 3.1(2e)affected
  • 3.1(2g)affected
  • 3.1(2i)affected
  • 3.1(3a)affected
  • 3.1(3b)affected
  • 3.1(3c)affected
  • 3.1(3d)affected
  • 3.1(3g)affected
  • 3.1(3h)affected
  • 3.1(3i)affected
  • 3.1(3j)affected
  • 3.1(3k)affected
  • 4.0(1.240)affected
  • 4.0(1a)affected
  • 4.0(1b)affected
  • 4.0(1c)affected
  • 4.0(1d)affected
  • 4.0(1e)affected
  • 4.0(1g)affected
  • 4.0(1h)affected
  • 4.0(2c)affected
  • 4.0(2d)affected
  • 4.0(2f)affected
  • 4.0(2g)affected
  • 4.0(2h)affected
  • 4.0(2i)affected
  • 4.0(2l)affected
  • 4.0(2n)affected
  • 4.0(4b)affected
  • 4.0(4c)affected
  • 4.0(4d)affected
  • 4.0(4e)affected
  • 4.0(4f)affected
  • 4.0(4h)affected
  • 4.0(4i)affected
  • 4.0(4k)affected
  • 4.0(4l)affected
  • 4.0(4m)affected
  • 4.0(2o)affected
  • 4.0(2p)affected
  • 4.0(4n)affected
  • 4.0(2q)affected
  • 4.0(2r)affected
  • 4.1(1c)affected
  • 4.1(1d)affected
  • 4.1(1f)affected
  • 4.1(1g)affected
  • 4.1(2a)affected
  • 4.1(1h)affected
  • 4.1(2b)affected
  • 4.1(2f)affected
  • 4.1(2e)affected
  • 4.1(3b)affected
  • 4.1(2d)affected
  • 4.1(3c)affected
  • 4.1(3d)affected
  • 4.1(2g)affected
  • 4.1(3f)affected
  • 4.1(2h)affected
  • 4.1(2j)affected
  • 4.1(2k)affected
  • 4.1(2l)affected
  • 4.1(3h)affected
  • 4.1(3i)affected
  • 4.1(3l)affected
  • 4.2(1a)affected
  • 4.2(1b)affected
  • 4.2(1c)affected
  • 4.2(1e)affected
  • 4.2(1f)affected
  • 4.2(1g)affected
  • 4.2(1i)affected
  • 4.2(1j)affected
  • 4.2(2a)affected
  • 4.2(2f)affected
  • 4.2(2g)affected
  • 4.2(3b)affected
  • 4.2(3d)affected
  • 4.2(3e)affected
  • 4.3(1.230097)affected
  • 4.3(1.230124)affected
  • 4.3(1.230138)affected

Cisco Cisco Unified Computing System E-Series Software (UCSE)

  • 2.1.0affected
  • 2.4.0affected
  • 2.4.1affected
  • 2.4.2affected
  • 3.2.1affected
  • 3.2.2affected
  • 3.2.3affected
  • 3.2.4affected
  • 3.2.6affected
  • 3.2.7affected
  • 3.2.10affected
  • 3.2.11.1affected
  • 3.2.8affected
  • 3.2.11.3affected
  • 3.2.11.5affected
  • 3.2.12.2affected
  • 3.2.13.6affected
  • 3.2.14affected
  • 3.1.1affected
  • 3.1.2affected
  • 3.1.3affected
  • 3.1.4affected
  • 3.1.5affected
  • 3.1.0affected
  • 3.0.1affected
  • 3.0.2affected
  • 2.3.1affected
  • 2.3.2affected
  • 2.3.3affected
  • 2.3.5affected
  • 2.2.1affected
  • 2.2.2affected
  • 2.0.0affected
  • 2.10affected
  • 3.06affected
  • 3.02affected
  • 4.11.1affected

References