Read the docs
TI-2023-06933 Aliases CVE-2023-20228GHSA-v2pg-m39g-cxhr

Cross-site scripting in Cisco Identity Services Engine Software

Priority LOW 28CWE-80Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-80.

Summary

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

Why it matters now

EPSS 0.00479 41st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Identity Services Engine SoftwareN/A—No fix listedCNA
CiscoCisco Unified Computing System (Standalone)3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); 3.1(2i); 3.1(3a); 3.1(3b); 3.1(3c); 3.1(3d); 3.1(3g); 3.1(3h); 3.1(3i); 3.1(3j); 3.1(3k); 4.0(1.240); 4.0(1a); 4.0(1b); 4.0(1c); 4.0(1d); 4.0(1e); 4.0(1g); 4.0(1h); 4.0(2c); 4.0(2d); 4.0(2f); 4.0(2g); 4.0(2h); 4.0(2i); 4.0(2l); 4.0(2n); 4.0(4b); 4.0(4c); 4.0(4d); 4.0(4e); 4.0(4f); 4.0(4h); 4.0(4i); 4.0(4k); 4.0(4l); 4.0(4m); 4.0(2o); 4.0(2p); 4.0(4n); 4.0(2q); 4.0(2r); 4.1(1c); 4.1(1d); 4.1(1f); 4.1(1g); 4.1(2a); 4.1(1h); 4.1(2b); 4.1(2f); 4.1(2e); 4.1(3b); 4.1(2d); 4.1(3c); 4.1(3d); 4.1(2g); 4.1(3f); 4.1(2h); 4.1(2j); 4.1(2k); 4.1(2l); 4.1(3h); 4.1(3i); 4.1(3l); 4.2(1a); 4.2(1b); 4.2(1c); 4.2(1e); 4.2(1f); 4.2(1g); 4.2(1i); 4.2(1j); 4.2(2a); 4.2(2f); 4.2(2g); 4.2(3b); 4.2(3d); 4.2(3e); 4.3(1.230097); 4.3(1.230124); 4.3(1.230138)—No fix listedCNA
CiscoCisco Unified Computing System E-Series Software (UCSE)2.1.0; 2.4.0; 2.4.1; 2.4.2; 3.2.1; 3.2.2; 3.2.3; 3.2.4; 3.2.6; 3.2.7; 3.2.10; 3.2.11.1; 3.2.8; 3.2.11.3; 3.2.11.5; 3.2.12.2; 3.2.13.6; 3.2.14; 3.1.1; 3.1.2; 3.1.3; 3.1.4; 3.1.5; 3.1.0; 3.0.1; 3.0.2; 2.3.1; 2.3.2; 2.3.3; 2.3.5; 2.2.1; 2.2.2; 2.0.0; 2.10; 3.06; 3.02; 4.11.1—No fix listedCNA
  • Cisco Identity Services Engine Software VendorCisco Affected N/A Fixed in — No fix listed CNA
  • Cisco Unified Computing System (Standalone) VendorCisco Affected 3.1(1d); 3.1(2b); 3.1(2c); 3.1(2d); 3.1(2e); 3.1(2g); 3.1(2i); 3.1(3a); 3.1(3b); 3.1(3c); 3.1(3d); 3.1(3g); 3.1(3h); 3.1(3i); 3.1(3j); 3.1(3k); 4.0(1.240); 4.0(1a); 4.0(1b); 4.0(1c); 4.0(1d); 4.0(1e); 4.0(1g); 4.0(1h); 4.0(2c); 4.0(2d); 4.0(2f); 4.0(2g); 4.0(2h); 4.0(2i); 4.0(2l); 4.0(2n); 4.0(4b); 4.0(4c); 4.0(4d); 4.0(4e); 4.0(4f); 4.0(4h); 4.0(4i); 4.0(4k); 4.0(4l); 4.0(4m); 4.0(2o); 4.0(2p); 4.0(4n); 4.0(2q); 4.0(2r); 4.1(1c); 4.1(1d); 4.1(1f); 4.1(1g); 4.1(2a); 4.1(1h); 4.1(2b); 4.1(2f); 4.1(2e); 4.1(3b); 4.1(2d); 4.1(3c); 4.1(3d); 4.1(2g); 4.1(3f); 4.1(2h); 4.1(2j); 4.1(2k); 4.1(2l); 4.1(3h); 4.1(3i); 4.1(3l); 4.2(1a); 4.2(1b); 4.2(1c); 4.2(1e); 4.2(1f); 4.2(1g); 4.2(1i); 4.2(1j); 4.2(2a); 4.2(2f); 4.2(2g); 4.2(3b); 4.2(3d); 4.2(3e); 4.3(1.230097); 4.3(1.230124); 4.3(1.230138) Fixed in — No fix listed CNA
  • Cisco Unified Computing System E-Series Software (UCSE) VendorCisco Affected 2.1.0; 2.4.0; 2.4.1; 2.4.2; 3.2.1; 3.2.2; 3.2.3; 3.2.4; 3.2.6; 3.2.7; 3.2.10; 3.2.11.1; 3.2.8; 3.2.11.3; 3.2.11.5; 3.2.12.2; 3.2.13.6; 3.2.14; 3.1.1; 3.1.2; 3.1.3; 3.1.4; 3.1.5; 3.1.0; 3.0.1; 3.0.2; 2.3.1; 2.3.2; 2.3.3; 2.3.5; 2.2.1; 2.2.2; 2.0.0; 2.10; 3.06; 3.02; 4.11.1 Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:o:cisco:encs_5100_firmware:*:*:*:*:*:*:*:*3.2 to before 3.2.15.1VulnerableCisco
cpe:2.3:h:cisco:encs_5100:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:encs_5400_firmware:*:*:*:*:*:*:*:*3.2 to before 3.2.15.1VulnerableCisco
cpe:2.3:h:cisco:encs_5400:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:ucs_c220_m5_rack_server_firmware:*:*:*:*:*:*:*:*4.2 to before 4.3.2.230207VulnerableCisco
cpe:2.3:h:cisco:ucs_c220_m5_rack_server:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:ucs_e160s_m3_firmware:*:*:*:*:*:*:*:*before 3.2.15.1VulnerableCisco
cpe:2.3:h:cisco:ucs_e160s_m3:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:ucs_e180d_m3_firmware:*:*:*:*:*:*:*:*before 3.2.15.1VulnerableCisco
cpe:2.3:h:cisco:ucs_e180d_m3:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:o:cisco:encs_5100_firmware:*:*:*:*:*:*:*:* Versions 3.2 to before 3.2.15.1 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:encs_5100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:encs_5400_firmware:*:*:*:*:*:*:*:* Versions 3.2 to before 3.2.15.1 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:encs_5400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:ucs_c220_m5_rack_server_firmware:*:*:*:*:*:*:*:* Versions 4.2 to before 4.3.2.230207 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:ucs_c220_m5_rack_server:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:ucs_e160s_m3_firmware:*:*:*:*:*:*:*:* Versions before 3.2.15.1 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:ucs_e160s_m3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:ucs_e180d_m3_firmware:*:*:*:*:*:*:*:* Versions before 3.2.15.1 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:ucs_e180d_m3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:cisco:ucs-e1120d-m3_firmware:*:*:*:*:*:*:*:*before 3.2.15.1VulnerableCisco
cpe:2.3:h:cisco:ucs-e1120d-m3:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:o:cisco:ucs-e1120d-m3_firmware:*:*:*:*:*:*:*:* Versions before 3.2.15.1 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:ucs-e1120d-m3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-20228
  2. 2026-10-03 Alias added: GHSA-v2pg-m39g-cxhr

References

Advisory 1

  • TI-2019-01275 Cisco Secure Boot Hardware Tampering Vulnerability CVSS 3.1MEDIUM 6.7
  • TI-2021-01124 Cisco Integrated Management Controller Open Redirect Vulnerability CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences