Description (CNA)
A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into a specific data field in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid user credentials with privileges that allow for vKVM access on the affected device. Note: The affected vKVM client is also included in Cisco UCS Manager.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Unified Computing System (Managed) | affected 4.0(1a); affected 3.2(3n); affected 4.1(1a); affected 4.1(1b); affected 4.0(4h); affected 4.1(1c); affected 3.2(3k); affected 3.2(2c); affected 4.0(4e); affected 4.0(4g); affected 3.2(3i); affected 4.0(2e); affected 3.2(3g); affected 4.0(4a); affected 4.0(2d); affected 3.2(2d); affected 4.0(1b); affected 4.0(4f); affected 3.2(3h); affected 3.2(2f); affected 4.0(4c); affected 3.2(3a); affected 4.0(1c); affected 3.2(3d); affected 3.2(2b); affected 4.0(4b); affected 3.2(2e); affected 4.0(2b); affected 4.0(4d); affected 3.2(1d); affected 3.2(3e); affected 3.2(3l); affected 3.2(3b); affected 4.0(2a); affected 3.2(3j); affected 4.0(1d); affected 3.2(3o); affected 4.0(4i); affected 4.1(1d); affected 4.1(2a); affected 4.1(1e); affected 3.2(3p); affected 4.1(2b); affected 4.0(4k); affected 4.1(3a); affected 4.1(3b); affected 4.1(2c); affected 4.0(4l); affected 4.1(4a); affected 4.1(3c); affected 4.1(3d); affected 4.2(1c); affected 4.2(1d); affected 4.0(4m); affected 4.1(3e); affected 4.2(1f); affected 4.1(3f); affected 4.2(1i); affected 4.1(3h); affected 4.2(1k); affected 4.2(1l); affected 4.0(4n); affected 4.2(1m); affected 4.1(3i); affected 4.2(2a); affected 4.2(1n); affected 4.1(3j); affected 4.2(2c); affected 4.2(2d); affected 4.2(3b); affected 4.1(3k); affected 4.0(4o); affected 4.2(2e); affected 4.2(3d); affected 4.2(3e); affected 4.2(3g); affected 4.1(3l); affected 4.3(2b); affected 4.2(3h); affected 4.2(3i); affected 4.3(2c); affected 4.1(3m); affected 4.3(2e); affected 4.3(3a); affected 4.2(3j); affected 4.3(3c); affected 4.3(4a); affected 4.2(3k); affected 4.3(4b); affected 4.3(4c); affected 4.2(3l); affected 4.3(4d); affected 4.3(2f); affected 4.2(3m); affected 4.3(5a); affected 4.3(4e); affected 4.1(3n); affected 4.3(4f); affected 4.2(3n); affected 4.3(5c); affected 4.2(3o); affected 4.3(5d); affected 4.3(5e) |
| Cisco / Cisco Unified Computing System (Standalone) | affected 2.0(1a); affected 4.0(2g); affected 2.0(13f); affected 3.0(4n); affected 2.0(3e)1; affected 3.0(3e); affected 2.0(8h); affected 2.0(10g); affected 3.1(2i); affected 3.0(3c); affected 3.0(4m); affected 3.1(1d); affected 3.0(3a); affected 3.0(1d); affected 2.0(9o); affected 2.0(13n); affected 4.0(4i); affected 4.1(1c); affected 2.0(13q); affected 2.0(3j)1; affected 4.0(2c); affected 2.0(9n); affected 4.0(1e); affected 2.0(13o); affected 2.0(6f); affected 2.0(10c); affected 2.0(8d); affected 2.0(9m); affected 4.0(2h); affected 3.0(4j); affected 2.0(10i); affected 3.0(3f); affected 2.0(10l); affected 2.0(12e); affected 2.0(12i); affected 2.0(10h); affected 2.0(13e); affected 3.0(4k); affected 2.0(10b); affected 2.0(6d); affected 2.0(12b); affected 4.0(4h); affected 2.0(12h); affected 2.0(10f); affected 3.0(4l); affected 4.0(1h); affected 4.0(2l); affected 2.0(3i); affected 2.0(3f)3; affected 3.0(4a); affected 2.0(13p); affected 2.0(9l); affected 2.0(12g); affected 2.0(12c); affected 2.0(12f); affected 2.0(13k); affected 3.0(3b); affected 2.0(1b); affected 3.1(3g); affected 2.0(4c); affected 4.0(1.240); affected 2.0(12d); affected 4.0(2f); affected 4.0(1g); affected 3.0(4d); affected 3.0(2b); affected 2.0(3d)2; affected 2.0(3d)1; affected 2.0(9f); affected 2.0(13h); affected 3.0(4e); affected 2.0(8g); affected 4.0(2i); affected 2.0(10e); affected 2.0(13i); affected 2.0(9c); affected 2.0(4c)1; affected 3.0(1c); affected 2.0(8e); affected 2.0(9e); affected 2.0(9p); affected 3.1(3i); affected 3.0(4i); affected 2.0(10k); affected 3.0(4o); affected 4.0(4d); affected 4.1(1d); affected 3.1(3c); affected 4.0(4k); affected 3.1(2d); affected 3.1(3a); affected 3.1(3j); affected 4.0(2d); affected 4.1(1f); affected 3.0(4p); affected 4.0(1c); affected 4.0(4f); affected 4.0(4c); affected 3.1(3d); affected 3.1(2g); affected 3.1(2c); affected 4.0(1d); affected 3.1(2e); affected 4.0(1a); affected 4.0(1b); affected 3.1(3b); affected 4.0(4b); affected 3.1(2b); affected 4.0(4e); affected 3.1(3h); affected 3.0(4q); affected 4.0(4l); affected 4.1(1g); affected 4.1(2a); affected 3.0(4r); affected 4.0(2n); affected 4.1(1h); affected 3.1(3k); affected 4.1(2b); affected 4.0(2o); affected 4.0(4m); affected 4.1(2d); affected 4.1(3b); affected 4.0(2p); affected 4.1(2e); affected 4.1(2f); affected 3.0(4s); affected 4.0(4n); affected 4.0(2q); affected 4.1(3c); affected 4.0(2r); affected 4.1(3d); affected 4.1(2g); affected 4.1(2h); affected 4.1(3f); affected 4.1(2j); affected 4.1(2k); affected 4.1(3h); affected 4.2(2a); affected 4.1(3i); affected 4.2(2f); affected 4.2(2g); affected 4.2(3b); affected 4.1(3l); affected 4.2(3d); affected 4.3(1.230097); affected 4.2(1e); affected 4.2(1b); affected 4.2(1j); affected 4.2(1i); affected 4.2(1f); affected 4.2(1a); affected 4.2(1c); affected 4.2(1g); affected 4.3(1.230124); affected 4.1(2l); affected 4.2(3e); affected 4.3(1.230138); affected 4.2(3g); affected 4.3(2.230207); affected 4.2(3h); affected 4.2(3i); affected 4.3(2.230270); affected 4.1(3m); affected 4.1(2m); affected 4.3(2.240002); affected 4.3(3.240022); affected 4.2(3j); affected 4.1(3n); affected 4.3(2.240009); affected 4.3(3.240043); affected 4.3(4.240142); affected 4.3(2.240037); affected 4.3(2.240053); affected 4.3(4.240152); affected 4.2(3l); affected 4.3(2.240077); affected 4.3(4.242028); affected 4.3(4.241063); affected 4.3(4.242038); affected 4.2(3m); affected 4.3(2.240090); affected 4.3(5.240021); affected 4.3(2.240107); affected 4.3(4.242066); affected 4.2(3n); affected 4.3(2.250016); affected 4.3(2.250021); affected 4.3(2.250022); affected 4.3(2.250037); affected 4.3(2.250045); affected 4.3(4.252001) |
| Cisco / Cisco Unified Computing System E-Series Software (UCSE) | affected 3.2.7; affected 3.2.6; affected 3.2.4; affected 3.2.10; affected 3.2.2; affected 3.2.3; affected 2.4.0; affected 3.2.1; affected 3.2.11.1; affected 3.2.8; affected 3.1.1; affected 3.0.2; affected 2.1.0; affected 2.2.2; affected 3.1.2; affected 3.0.1; affected 2.3.2; affected 2.3.5; affected 2.2.1; affected 3.1.4; affected 2.4.1; affected 2.3.1; affected 3.1.3; affected 2.3.3; affected 2.4.2; affected 3.1.5; affected 3.1.0; affected 2.0.0; affected 3.2.11.3; affected 3.2.11.5; affected 3.2.12.2; affected 3.2.13.6; affected 3.2.14; affected 4.11.1; affected 3.2.15; affected 4.12.1; affected 3.2.15.3; affected 4.12.2; affected 3.2.16.1; affected 2.02; affected 4.00 |
CWE
CWE-80
References
ADP enrichment
No English description supplied.
No references supplied.