DOM-based Stored Cross-Site Scripting Vulnerability in Cisco Integrated Management Software
CVE-2018-0149

4.8MEDIUM

Key Information:

Vendor: Cisco
Status: Cisco Integrated Management Controller Supervisor And Cisco Ucs Director Unknown
Vendor: CVE Published:; 7 June 2018

What is CVE-2018-0149?

A security vulnerability exists in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software. This issue arises from inadequate validation of user input, making it possible for authenticated, remote attackers to perform DOM-based stored cross-site scripting (XSS) attacks. Exploiting this vulnerability requires persuading a user to click on a malicious link, which can lead to the execution of arbitrary script code within the context of the affected web interface, compromising the user's sensitive information. This provides attackers with an avenue to manipulate the affected system and potentially harvest confidential data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Cisco Integrated Management Controller Supervisor and Cisco UCS Director unknown Cisco Integrated Management Controller Supervisor and Cisco UCS Director unknown