Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2023-20263

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web page

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco HyperFlex HX Data Platform

  • 4.0(1a)affected
  • 4.0(1b)affected
  • 4.0(2a)affected
  • 4.0(2b)affected
  • 4.0(2c)affected
  • 4.0(2d)affected
  • 4.0(2e)affected
  • 4.0(2f)affected
  • 4.5(1a)affected
  • 4.5(2a)affected
  • 4.5(2b)affected
  • 4.5(2c)affected
  • 4.5(2d)affected
  • 4.5(2e)affected
  • 5.0(1a)affected
  • 5.0(1b)affected
  • 5.0(1c)affected
  • 5.0(2a)affected
  • 5.0(2b)affected

References