What’s Vulnerable › Vulnerabilities

CVE-2020-17457

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-17 · updated 2026-06-17
• Weakness: CWE-79

Description

Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS payload in the PSCU_FILE_INIT field of a Save Configuration XML document. The payload is triggered in the HTTP error response pages.

Affected products

• Fujitsu Serverview Remote Management: before 9.62f — fixed in 9.62f

How to fix

Upgrade to a fixed version: Fujitsu Serverview Remote Management 9.62f. Check the vendor advisory for mitigations.

References

• https://support.ts.fujitsu.com/IndexDownload.asp?Softwareguid=C67A44AE-B022-4150-8621-C4393C007ED9
• https://www.gruppotim.it/redteam
• https://support.ts.fujitsu.com/IndexDownload.asp?Softwareguid=C67A44AE-B022-4150-8621-C4393C007ED9
• https://www.gruppotim.it/redteam

Get alerted when CVE-2020-17457 or the next vulnerability affects your stack