CVE-2023-20228

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-16 · updated 2026-06-17
Weakness: CWE-80

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

Affected products

Cisco Encs 5100 Firmware: from 3.2 before 3.2.15.1 — fixed in 3.2.15.1
Cisco Encs 5400 Firmware: from 3.2 before 3.2.15.1 — fixed in 3.2.15.1
Cisco Ucs-E1120D-M3 Firmware: before 3.2.15.1 — fixed in 3.2.15.1
Cisco Ucs C220 M5 Rack Server Firmware: from 4.2 before 4.3.2.230207 — fixed in 4.3.2.230207
Cisco Ucs E160S M3 Firmware: before 3.2.15.1 — fixed in 3.2.15.1
Cisco Ucs E180D M3 Firmware: before 3.2.15.1 — fixed in 3.2.15.1

How to fix

Upgrade to a fixed version: Cisco Encs 5100 Firmware 3.2.15.1; Cisco Encs 5400 Firmware 3.2.15.1; Cisco Ucs-E1120D-M3 Firmware 3.2.15.1; Cisco Ucs C220 M5 Rack Server Firmware 4.3.2.230207; Cisco Ucs E160S M3 Firmware 3.2.15.1; Cisco Ucs E180D M3 Firmware 3.2.15.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-20228 or the next vulnerability affects your stack