4.8
CVSSv3

CVE-2022-20765

Published: 27/05/2022 Updated: 07/11/2023
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 4.8 | Impact Score: 2.7 | Exploitability Score: 1.7
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote malicious user to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom JavaScript to affected web applications. A successful exploit could allow the malicious user to rewrite web page content, access sensitive information stored in the applications, and alter data by submitting forms.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ucs director

Vendor Advisories

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system This vulnerability is due to unsanitized user input An attacker could exploit this vulnerability by submitting custom JavaScript to affected web applications A successful explo ...