CVE-2025-20296
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Cisco UCS Manager Software Stored Software Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious data into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must be a member of the Administrator or AAA Administrator role.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco Unified Computing System (Managed)
- Vendor
- Cisco
- Product
- Cisco Unified Computing System (Managed)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.0(1a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3p) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3o) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(2e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(1d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(2c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(2b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(2d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(2f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.2(3b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(4a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4m) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1m) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(2a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(2c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(2d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4o) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(2e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3m) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(3a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(3c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3m) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(5a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(5c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3o) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(5d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(5e) | affected | Unavailable | Unavailable | Unavailable | None listed |