What’s Vulnerable › Vulnerabilities

CVE-2023-20037

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-20 · updated 2026-06-17
• Weakness: CWE-79

Description

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Affected products

• Cisco Industrial Network Director: before 1.7.0 — fixed in 1.7.0

How to fix

Upgrade to a fixed version: Cisco Industrial Network Director 1.7.0. Check the vendor advisory for mitigations.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ind-fZyVjJtG
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ind-fZyVjJtG

Get alerted when CVE-2023-20037 or the next vulnerability affects your stack