Description (CNA)
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Identity Services Engine Software | affected N/A |
| Cisco / Cisco Unified Computing System (Standalone) | affected 3.1(1d); affected 3.1(2b); affected 3.1(2c); affected 3.1(2d); affected 3.1(2e); affected 3.1(2g); affected 3.1(2i); affected 3.1(3a); affected 3.1(3b); affected 3.1(3c); affected 3.1(3d); affected 3.1(3g); affected 3.1(3h); affected 3.1(3i); affected 3.1(3j); affected 3.1(3k); affected 4.0(1.240); affected 4.0(1a); affected 4.0(1b); affected 4.0(1c); affected 4.0(1d); affected 4.0(1e); affected 4.0(1g); affected 4.0(1h); affected 4.0(2c); affected 4.0(2d); affected 4.0(2f); affected 4.0(2g); affected 4.0(2h); affected 4.0(2i); affected 4.0(2l); affected 4.0(2n); affected 4.0(4b); affected 4.0(4c); affected 4.0(4d); affected 4.0(4e); affected 4.0(4f); affected 4.0(4h); affected 4.0(4i); affected 4.0(4k); affected 4.0(4l); affected 4.0(4m); affected 4.0(2o); affected 4.0(2p); affected 4.0(4n); affected 4.0(2q); affected 4.0(2r); affected 4.1(1c); affected 4.1(1d); affected 4.1(1f); affected 4.1(1g); affected 4.1(2a); affected 4.1(1h); affected 4.1(2b); affected 4.1(2f); affected 4.1(2e); affected 4.1(3b); affected 4.1(2d); affected 4.1(3c); affected 4.1(3d); affected 4.1(2g); affected 4.1(3f); affected 4.1(2h); affected 4.1(2j); affected 4.1(2k); affected 4.1(2l); affected 4.1(3h); affected 4.1(3i); affected 4.1(3l); affected 4.2(1a); affected 4.2(1b); affected 4.2(1c); affected 4.2(1e); affected 4.2(1f); affected 4.2(1g); affected 4.2(1i); affected 4.2(1j); affected 4.2(2a); affected 4.2(2f); affected 4.2(2g); affected 4.2(3b); affected 4.2(3d); affected 4.2(3e); affected 4.3(1.230097); affected 4.3(1.230124); affected 4.3(1.230138) |
| Cisco / Cisco Unified Computing System E-Series Software (UCSE) | affected 2.1.0; affected 2.4.0; affected 2.4.1; affected 2.4.2; affected 3.2.1; affected 3.2.2; affected 3.2.3; affected 3.2.4; affected 3.2.6; affected 3.2.7; affected 3.2.10; affected 3.2.11.1; affected 3.2.8; affected 3.2.11.3; affected 3.2.11.5; affected 3.2.12.2; affected 3.2.13.6; affected 3.2.14; affected 3.1.1; affected 3.1.2; affected 3.1.3; affected 3.1.4; affected 3.1.5; affected 3.1.0; affected 3.0.1; affected 3.0.2; affected 2.3.1; affected 2.3.2; affected 2.3.3; affected 2.3.5; affected 2.2.1; affected 2.2.2; affected 2.0.0; affected 2.10; affected 3.06; affected 3.02; affected 4.11.1 |
CWE
CWE-80
References
ADP enrichment
No English description supplied.