CVE-2023-20242
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.
This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-10-27 CVE Reserved
- 2023-08-16 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-22 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)" | session_management |
Affected
| ||||||
Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)" | session_management |
Affected
| ||||||
Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 14.0 Search vendor "Cisco" for product "Unified Communications Manager" and version "14.0" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 14.0 Search vendor "Cisco" for product "Unified Communications Manager" and version "14.0" | session_management |
Affected
| ||||||
Cisco Search vendor "Cisco" | Unified Communications Manager Im And Presence Service Search vendor "Cisco" for product "Unified Communications Manager Im And Presence Service" | 11.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager Im And Presence Service" and version "11.5\(1\)" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Unified Communications Manager Im And Presence Service Search vendor "Cisco" for product "Unified Communications Manager Im And Presence Service" | 12.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager Im And Presence Service" and version "12.5\(1\)" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Unified Communications Manager Im And Presence Service Search vendor "Cisco" for product "Unified Communications Manager Im And Presence Service" | 14.0 Search vendor "Cisco" for product "Unified Communications Manager Im And Presence Service" and version "14.0" | - |
Affected
|