A vulnerability in the web-based management interface of... · CVE-2023-20208 · GitHub Advisory Database · GitHub

A vulnerability in the web-based management interface of...

Moderate severity Unreviewed Published Nov 21, 2023 to the GitHub Advisory Database • Updated Jan 25, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based management interface of an affected device.

References

Published by the National Vulnerability Database

Nov 21, 2023

Published to the GitHub Advisory Database Nov 21, 2023

Last updated Jan 25, 2024

Severity

Moderate

4.8

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

High

User interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N