CVE Feed

    Dashboard / CVE / CVE-2023-20179

    CVE-2023-20179

    A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to inject HTML content. This vulnerability is due to improper validation of user-supplied data in element fields. An attacker could exploit this vulnerability by submitting malicious content within requests and persuading a user to view a page that contains injected content. A successful exploit could allow the attacker to modify pages within the web-based management interface, possibly leading to further browser-based attacks against users of the application.

    Published:Sep 27, 2023
    Last Modified:Nov 21, 2024
    EPS:Sep 27, 2023
    EPSS Score:0.00081
    CVSS Score:4.3

    Affected Products

    Vendor
    Cisco
    Product
    Sd-wan Vmanage

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-20262 (CVSS 5.3) — A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote att…
    CVE-2023-20253 (CVSS 7.1) — A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow a…
    CVE-2023-20214 (CVSS 9.1) — A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software cou…
    CVE-2023-20098 (CVSS 4.4) — A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to del…
    CVE-2022-20830 (CVSS 5.3) — A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-A…
    CVE-2022-20930 (CVSS 6.7) — A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite …
    CVE-2022-20850 (CVSS 5.5) — A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow a…
    CVE-2022-20818 (CVSS 7.8) — Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to g…
    CVE-2022-20696 (CVSS 7.5) — A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauth…
    CVE-2022-20735 (CVSS 6.5) — A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthen…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High