Stored Cross-Site Scripting Vulnerability in Cisco Industrial Network Director
CVE-2023-20037
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 20 January 2023
What is CVE-2023-20037?
A flaw in the Cisco Industrial Network Director allows an authenticated remote attacker to conduct stored cross-site scripting (XSS) attacks. This vulnerability arises due to insufficient validation of user-submitted content, enabling an attacker to inject malicious scripts. By exploiting this vulnerability, the attacker can execute arbitrary scripts within the affected application's context, thereby gaining access to sensitive browser information and potentially compromising the application’s integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Cisco Industrial Network Director 1.5.0
Cisco Industrial Network Director 1.5.1
Cisco Industrial Network Director 1.4.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved