6.1
Moyenne
CVE-2023-20228 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…
Description
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Identity Services Engine Software | Versions non publiées | |
| Cisco Unified Computing System (Standalone) | Versions non publiées | |
| Cisco Unified Computing System E-Series Software (UCSE) | 4.11.1 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 3.06 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 3.2 | 3.2.1 → 3.2.14 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 3.02 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 3.1 | 3.1.0 → 3.1.5 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 3.0 | 3.0.1 → 3.0.2 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 2.10 | Pas de correctif indiqué |
Afficher les 5 autres branches Masquer les 5 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unified Computing System E-Series Software (UCSE) 2.4 | 2.4.0 → 2.4.2 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 2.3 | 2.3.1 → 2.3.5 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 2.2 | 2.2.1 → 2.2.2 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 2.1.0 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 2.0.0 | Pas de correctif indiqué |
Références
- cisco-sa-cimc-xss-UMYtYEtr sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Identity Services Engine Software
Les 199 CVE de Cisco Identity Services Engine Software →
CVE-2026-20241
Cisco Identity Services Engine Authorization Bypass Vulnerability
5.3
Moyenne
CVE-2026-76426
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to…
4.9
Moyenne
CVE-2026-76431
A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC…
4.9
Moyenne
CVE-2026-76427
A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to…
4.9
Moyenne