CVE-2023-20228
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco Identity Services Engine Software
- Vendor
- Cisco
- Product
- Cisco Identity Services Engine Software
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| N/A | affected | Unavailable | Unavailable | Unavailable | None listed |
Cisco Unified Computing System (Standalone)
- Vendor
- Cisco
- Product
- Cisco Unified Computing System (Standalone)
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.1(1d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1.240) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4m) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2o) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2p) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2q) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2r) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(2a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(2f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(2g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(1.230097) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(1.230124) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(1.230138) | affected | Unavailable | Unavailable | Unavailable | None listed |
Cisco Unified Computing System E-Series Software (UCSE)
- Vendor
- Cisco
- Product
- Cisco Unified Computing System E-Series Software (UCSE)
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.1.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.4.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.4.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.4.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.11.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.11.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.11.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.12.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.13.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2.14 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.0.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.0.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.3.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.3.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.3.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.3.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.2.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.2.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.0.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.06 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.02 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.11.1 | affected | Unavailable | Unavailable | Unavailable | None listed |