Логотип exploitDog
bind:CVE-2023-20037
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-20037

Количество 3

Количество 3

nvd логотип

CVE-2023-20037

около 3 лет назад

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-phx8-4x5v-wgc8

около 3 лет назад

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

CVSS3: 5.4
EPSS: Низкий
fstec логотип

BDU:2023-00714

около 3 лет назад

Уязвимость программного пакета Cisco Industrial Network Director, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код скрипта в контексте уязвимого интерфейса или получить доступ к конфиденциальной информации в браузере

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-20037

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

CVSS3: 5.4
0%
Низкий
около 3 лет назад
github логотип
GHSA-phx8-4x5v-wgc8

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

CVSS3: 5.4
0%
Низкий
около 3 лет назад
fstec логотип
BDU:2023-00714

Уязвимость программного пакета Cisco Industrial Network Director, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код скрипта в контексте уязвимого интерфейса или получить доступ к конфиденциальной информации в браузере

CVSS3: 5.4
0%
Низкий
около 3 лет назад

Уязвимостей на страницу