CVE-2023-20257

Summary

CVE-2023-20257 is a vulnerability affecting the web-based management interface of Cisco Prime Infrastructure. This issue allows authenticated, remote attackers to carry out cross-site scripting (XSS) attacks. The root cause of this vulnerability is the lack of proper input validation, enabling attackers to inject malicious scripts or HTML content into requests. Successful exploitation of this weakness could result in XSS attacks against other users of the affected application.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.