CVE-2023-20228

Summary

CVE-2023-20228 is a newly disclosed vulnerability affecting the web-based management interface of Cisco Integrated Management Controller (IMC). This issue allows unauthenticated, remote attackers to execute cross-site scripting (XSS) attacks on users of the interface. The cause of this vulnerability is rooted in insufficient user input validation. An attacker can trick a user into clicking a maliciously crafted link, leading to arbitrary script code execution in the targeted user's browser or unauthorized access to sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.