Files
vuln-cve/data/2025/20xxx/CVE-2025-20342.json
T

1480 lines
56 KiB
JSON

{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2025-20342",
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"state": "PUBLISHED",
"assignerShortName": "cisco",
"dateReserved": "2024-10-10T19:15:13.255Z",
"datePublished": "2025-08-27T16:23:18.618Z",
"dateUpdated": "2025-08-27T17:38:30.823Z"
},
"containers": {
"cna": {
"title": "Cisco Integrated Management Controller Virtual Keyboard Video Monitor (vKVM) Stored Cross-Site Scripting Vulnerability",
"metrics": [
{
"format": "cvssV3_1",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting (XSS) attack against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into a specific data field in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid user credentials with privileges that allow for vKVM access on the affected device.\r\nNote: The affected vKVM client is also included in Cisco UCS Manager."
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-kvmsxss-6h7AnUyk",
"name": "cisco-sa-ucs-kvmsxss-6h7AnUyk"
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"source": {
"advisory": "cisco-sa-ucs-kvmsxss-6h7AnUyk",
"discovery": "INTERNAL",
"defects": [
"CSCwm57433"
]
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"type": "cwe",
"cweId": "CWE-80"
}
]
}
],
"affected": [
{
"vendor": "Cisco",
"product": "Cisco Unified Computing System (Managed)",
"versions": [
{
"version": "4.0(1a)",
"status": "affected"
},
{
"version": "3.2(3n)",
"status": "affected"
},
{
"version": "4.1(1a)",
"status": "affected"
},
{
"version": "4.1(1b)",
"status": "affected"
},
{
"version": "4.0(4h)",
"status": "affected"
},
{
"version": "4.1(1c)",
"status": "affected"
},
{
"version": "3.2(3k)",
"status": "affected"
},
{
"version": "3.2(2c)",
"status": "affected"
},
{
"version": "4.0(4e)",
"status": "affected"
},
{
"version": "4.0(4g)",
"status": "affected"
},
{
"version": "3.2(3i)",
"status": "affected"
},
{
"version": "4.0(2e)",
"status": "affected"
},
{
"version": "3.2(3g)",
"status": "affected"
},
{
"version": "4.0(4a)",
"status": "affected"
},
{
"version": "4.0(2d)",
"status": "affected"
},
{
"version": "3.2(2d)",
"status": "affected"
},
{
"version": "4.0(1b)",
"status": "affected"
},
{
"version": "4.0(4f)",
"status": "affected"
},
{
"version": "3.2(3h)",
"status": "affected"
},
{
"version": "3.2(2f)",
"status": "affected"
},
{
"version": "4.0(4c)",
"status": "affected"
},
{
"version": "3.2(3a)",
"status": "affected"
},
{
"version": "4.0(1c)",
"status": "affected"
},
{
"version": "3.2(3d)",
"status": "affected"
},
{
"version": "3.2(2b)",
"status": "affected"
},
{
"version": "4.0(4b)",
"status": "affected"
},
{
"version": "3.2(2e)",
"status": "affected"
},
{
"version": "4.0(2b)",
"status": "affected"
},
{
"version": "4.0(4d)",
"status": "affected"
},
{
"version": "3.2(1d)",
"status": "affected"
},
{
"version": "3.2(3e)",
"status": "affected"
},
{
"version": "3.2(3l)",
"status": "affected"
},
{
"version": "3.2(3b)",
"status": "affected"
},
{
"version": "4.0(2a)",
"status": "affected"
},
{
"version": "3.2(3j)",
"status": "affected"
},
{
"version": "4.0(1d)",
"status": "affected"
},
{
"version": "3.2(3o)",
"status": "affected"
},
{
"version": "4.0(4i)",
"status": "affected"
},
{
"version": "4.1(1d)",
"status": "affected"
},
{
"version": "4.1(2a)",
"status": "affected"
},
{
"version": "4.1(1e)",
"status": "affected"
},
{
"version": "3.2(3p)",
"status": "affected"
},
{
"version": "4.1(2b)",
"status": "affected"
},
{
"version": "4.0(4k)",
"status": "affected"
},
{
"version": "4.1(3a)",
"status": "affected"
},
{
"version": "4.1(3b)",
"status": "affected"
},
{
"version": "4.1(2c)",
"status": "affected"
},
{
"version": "4.0(4l)",
"status": "affected"
},
{
"version": "4.1(4a)",
"status": "affected"
},
{
"version": "4.1(3c)",
"status": "affected"
},
{
"version": "4.1(3d)",
"status": "affected"
},
{
"version": "4.2(1c)",
"status": "affected"
},
{
"version": "4.2(1d)",
"status": "affected"
},
{
"version": "4.0(4m)",
"status": "affected"
},
{
"version": "4.1(3e)",
"status": "affected"
},
{
"version": "4.2(1f)",
"status": "affected"
},
{
"version": "4.1(3f)",
"status": "affected"
},
{
"version": "4.2(1i)",
"status": "affected"
},
{
"version": "4.1(3h)",
"status": "affected"
},
{
"version": "4.2(1k)",
"status": "affected"
},
{
"version": "4.2(1l)",
"status": "affected"
},
{
"version": "4.0(4n)",
"status": "affected"
},
{
"version": "4.2(1m)",
"status": "affected"
},
{
"version": "4.1(3i)",
"status": "affected"
},
{
"version": "4.2(2a)",
"status": "affected"
},
{
"version": "4.2(1n)",
"status": "affected"
},
{
"version": "4.1(3j)",
"status": "affected"
},
{
"version": "4.2(2c)",
"status": "affected"
},
{
"version": "4.2(2d)",
"status": "affected"
},
{
"version": "4.2(3b)",
"status": "affected"
},
{
"version": "4.1(3k)",
"status": "affected"
},
{
"version": "4.0(4o)",
"status": "affected"
},
{
"version": "4.2(2e)",
"status": "affected"
},
{
"version": "4.2(3d)",
"status": "affected"
},
{
"version": "4.2(3e)",
"status": "affected"
},
{
"version": "4.2(3g)",
"status": "affected"
},
{
"version": "4.1(3l)",
"status": "affected"
},
{
"version": "4.3(2b)",
"status": "affected"
},
{
"version": "4.2(3h)",
"status": "affected"
},
{
"version": "4.2(3i)",
"status": "affected"
},
{
"version": "4.3(2c)",
"status": "affected"
},
{
"version": "4.1(3m)",
"status": "affected"
},
{
"version": "4.3(2e)",
"status": "affected"
},
{
"version": "4.3(3a)",
"status": "affected"
},
{
"version": "4.2(3j)",
"status": "affected"
},
{
"version": "4.3(3c)",
"status": "affected"
},
{
"version": "4.3(4a)",
"status": "affected"
},
{
"version": "4.2(3k)",
"status": "affected"
},
{
"version": "4.3(4b)",
"status": "affected"
},
{
"version": "4.3(4c)",
"status": "affected"
},
{
"version": "4.2(3l)",
"status": "affected"
},
{
"version": "4.3(4d)",
"status": "affected"
},
{
"version": "4.3(2f)",
"status": "affected"
},
{
"version": "4.2(3m)",
"status": "affected"
},
{
"version": "4.3(5a)",
"status": "affected"
},
{
"version": "4.3(4e)",
"status": "affected"
},
{
"version": "4.1(3n)",
"status": "affected"
},
{
"version": "4.3(4f)",
"status": "affected"
},
{
"version": "4.2(3n)",
"status": "affected"
},
{
"version": "4.3(5c)",
"status": "affected"
},
{
"version": "4.2(3o)",
"status": "affected"
},
{
"version": "4.3(5d)",
"status": "affected"
},
{
"version": "4.3(5e)",
"status": "affected"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Cisco",
"product": "Cisco Unified Computing System (Standalone)",
"versions": [
{
"version": "2.0(1a)",
"status": "affected"
},
{
"version": "4.0(2g)",
"status": "affected"
},
{
"version": "2.0(13f)",
"status": "affected"
},
{
"version": "3.0(4n)",
"status": "affected"
},
{
"version": "2.0(3e)1",
"status": "affected"
},
{
"version": "3.0(3e)",
"status": "affected"
},
{
"version": "2.0(8h)",
"status": "affected"
},
{
"version": "2.0(10g)",
"status": "affected"
},
{
"version": "3.1(2i)",
"status": "affected"
},
{
"version": "3.0(3c)",
"status": "affected"
},
{
"version": "3.0(4m)",
"status": "affected"
},
{
"version": "3.1(1d)",
"status": "affected"
},
{
"version": "3.0(3a)",
"status": "affected"
},
{
"version": "3.0(1d)",
"status": "affected"
},
{
"version": "2.0(9o)",
"status": "affected"
},
{
"version": "2.0(13n)",
"status": "affected"
},
{
"version": "4.0(4i)",
"status": "affected"
},
{
"version": "4.1(1c)",
"status": "affected"
},
{
"version": "2.0(13q)",
"status": "affected"
},
{
"version": "2.0(3j)1",
"status": "affected"
},
{
"version": "4.0(2c)",
"status": "affected"
},
{
"version": "2.0(9n)",
"status": "affected"
},
{
"version": "4.0(1e)",
"status": "affected"
},
{
"version": "2.0(13o)",
"status": "affected"
},
{
"version": "2.0(6f)",
"status": "affected"
},
{
"version": "2.0(10c)",
"status": "affected"
},
{
"version": "2.0(8d)",
"status": "affected"
},
{
"version": "2.0(9m)",
"status": "affected"
},
{
"version": "4.0(2h)",
"status": "affected"
},
{
"version": "3.0(4j)",
"status": "affected"
},
{
"version": "2.0(10i)",
"status": "affected"
},
{
"version": "3.0(3f)",
"status": "affected"
},
{
"version": "2.0(10l)",
"status": "affected"
},
{
"version": "2.0(12e)",
"status": "affected"
},
{
"version": "2.0(12i)",
"status": "affected"
},
{
"version": "2.0(10h)",
"status": "affected"
},
{
"version": "2.0(13e)",
"status": "affected"
},
{
"version": "3.0(4k)",
"status": "affected"
},
{
"version": "2.0(10b)",
"status": "affected"
},
{
"version": "2.0(6d)",
"status": "affected"
},
{
"version": "2.0(12b)",
"status": "affected"
},
{
"version": "4.0(4h)",
"status": "affected"
},
{
"version": "2.0(12h)",
"status": "affected"
},
{
"version": "2.0(10f)",
"status": "affected"
},
{
"version": "3.0(4l)",
"status": "affected"
},
{
"version": "4.0(1h)",
"status": "affected"
},
{
"version": "4.0(2l)",
"status": "affected"
},
{
"version": "2.0(3i)",
"status": "affected"
},
{
"version": "2.0(3f)3",
"status": "affected"
},
{
"version": "3.0(4a)",
"status": "affected"
},
{
"version": "2.0(13p)",
"status": "affected"
},
{
"version": "2.0(9l)",
"status": "affected"
},
{
"version": "2.0(12g)",
"status": "affected"
},
{
"version": "2.0(12c)",
"status": "affected"
},
{
"version": "2.0(12f)",
"status": "affected"
},
{
"version": "2.0(13k)",
"status": "affected"
},
{
"version": "3.0(3b)",
"status": "affected"
},
{
"version": "2.0(1b)",
"status": "affected"
},
{
"version": "3.1(3g)",
"status": "affected"
},
{
"version": "2.0(4c)",
"status": "affected"
},
{
"version": "4.0(1.240)",
"status": "affected"
},
{
"version": "2.0(12d)",
"status": "affected"
},
{
"version": "4.0(2f)",
"status": "affected"
},
{
"version": "4.0(1g)",
"status": "affected"
},
{
"version": "3.0(4d)",
"status": "affected"
},
{
"version": "3.0(2b)",
"status": "affected"
},
{
"version": "2.0(3d)2",
"status": "affected"
},
{
"version": "2.0(3d)1",
"status": "affected"
},
{
"version": "2.0(9f)",
"status": "affected"
},
{
"version": "2.0(13h)",
"status": "affected"
},
{
"version": "3.0(4e)",
"status": "affected"
},
{
"version": "2.0(8g)",
"status": "affected"
},
{
"version": "4.0(2i)",
"status": "affected"
},
{
"version": "2.0(10e)",
"status": "affected"
},
{
"version": "2.0(13i)",
"status": "affected"
},
{
"version": "2.0(9c)",
"status": "affected"
},
{
"version": "2.0(4c)1",
"status": "affected"
},
{
"version": "3.0(1c)",
"status": "affected"
},
{
"version": "2.0(8e)",
"status": "affected"
},
{
"version": "2.0(9e)",
"status": "affected"
},
{
"version": "2.0(9p)",
"status": "affected"
},
{
"version": "3.1(3i)",
"status": "affected"
},
{
"version": "3.0(4i)",
"status": "affected"
},
{
"version": "2.0(10k)",
"status": "affected"
},
{
"version": "3.0(4o)",
"status": "affected"
},
{
"version": "4.0(4d)",
"status": "affected"
},
{
"version": "4.1(1d)",
"status": "affected"
},
{
"version": "3.1(3c)",
"status": "affected"
},
{
"version": "4.0(4k)",
"status": "affected"
},
{
"version": "3.1(2d)",
"status": "affected"
},
{
"version": "3.1(3a)",
"status": "affected"
},
{
"version": "3.1(3j)",
"status": "affected"
},
{
"version": "4.0(2d)",
"status": "affected"
},
{
"version": "4.1(1f)",
"status": "affected"
},
{
"version": "3.0(4p)",
"status": "affected"
},
{
"version": "4.0(1c)",
"status": "affected"
},
{
"version": "4.0(4f)",
"status": "affected"
},
{
"version": "4.0(4c)",
"status": "affected"
},
{
"version": "3.1(3d)",
"status": "affected"
},
{
"version": "3.1(2g)",
"status": "affected"
},
{
"version": "3.1(2c)",
"status": "affected"
},
{
"version": "4.0(1d)",
"status": "affected"
},
{
"version": "3.1(2e)",
"status": "affected"
},
{
"version": "4.0(1a)",
"status": "affected"
},
{
"version": "4.0(1b)",
"status": "affected"
},
{
"version": "3.1(3b)",
"status": "affected"
},
{
"version": "4.0(4b)",
"status": "affected"
},
{
"version": "3.1(2b)",
"status": "affected"
},
{
"version": "4.0(4e)",
"status": "affected"
},
{
"version": "3.1(3h)",
"status": "affected"
},
{
"version": "3.0(4q)",
"status": "affected"
},
{
"version": "4.0(4l)",
"status": "affected"
},
{
"version": "4.1(1g)",
"status": "affected"
},
{
"version": "4.1(2a)",
"status": "affected"
},
{
"version": "3.0(4r)",
"status": "affected"
},
{
"version": "4.0(2n)",
"status": "affected"
},
{
"version": "4.1(1h)",
"status": "affected"
},
{
"version": "3.1(3k)",
"status": "affected"
},
{
"version": "4.1(2b)",
"status": "affected"
},
{
"version": "4.0(2o)",
"status": "affected"
},
{
"version": "4.0(4m)",
"status": "affected"
},
{
"version": "4.1(2d)",
"status": "affected"
},
{
"version": "4.1(3b)",
"status": "affected"
},
{
"version": "4.0(2p)",
"status": "affected"
},
{
"version": "4.1(2e)",
"status": "affected"
},
{
"version": "4.1(2f)",
"status": "affected"
},
{
"version": "3.0(4s)",
"status": "affected"
},
{
"version": "4.0(4n)",
"status": "affected"
},
{
"version": "4.0(2q)",
"status": "affected"
},
{
"version": "4.1(3c)",
"status": "affected"
},
{
"version": "4.0(2r)",
"status": "affected"
},
{
"version": "4.1(3d)",
"status": "affected"
},
{
"version": "4.1(2g)",
"status": "affected"
},
{
"version": "4.1(2h)",
"status": "affected"
},
{
"version": "4.1(3f)",
"status": "affected"
},
{
"version": "4.1(2j)",
"status": "affected"
},
{
"version": "4.1(2k)",
"status": "affected"
},
{
"version": "4.1(3h)",
"status": "affected"
},
{
"version": "4.2(2a)",
"status": "affected"
},
{
"version": "4.1(3i)",
"status": "affected"
},
{
"version": "4.2(2f)",
"status": "affected"
},
{
"version": "4.2(2g)",
"status": "affected"
},
{
"version": "4.2(3b)",
"status": "affected"
},
{
"version": "4.1(3l)",
"status": "affected"
},
{
"version": "4.2(3d)",
"status": "affected"
},
{
"version": "4.3(1.230097)",
"status": "affected"
},
{
"version": "4.2(1e)",
"status": "affected"
},
{
"version": "4.2(1b)",
"status": "affected"
},
{
"version": "4.2(1j)",
"status": "affected"
},
{
"version": "4.2(1i)",
"status": "affected"
},
{
"version": "4.2(1f)",
"status": "affected"
},
{
"version": "4.2(1a)",
"status": "affected"
},
{
"version": "4.2(1c)",
"status": "affected"
},
{
"version": "4.2(1g)",
"status": "affected"
},
{
"version": "4.3(1.230124)",
"status": "affected"
},
{
"version": "4.1(2l)",
"status": "affected"
},
{
"version": "4.2(3e)",
"status": "affected"
},
{
"version": "4.3(1.230138)",
"status": "affected"
},
{
"version": "4.2(3g)",
"status": "affected"
},
{
"version": "4.3(2.230207)",
"status": "affected"
},
{
"version": "4.2(3h)",
"status": "affected"
},
{
"version": "4.2(3i)",
"status": "affected"
},
{
"version": "4.3(2.230270)",
"status": "affected"
},
{
"version": "4.1(3m)",
"status": "affected"
},
{
"version": "4.1(2m)",
"status": "affected"
},
{
"version": "4.3(2.240002)",
"status": "affected"
},
{
"version": "4.3(3.240022)",
"status": "affected"
},
{
"version": "4.2(3j)",
"status": "affected"
},
{
"version": "4.1(3n)",
"status": "affected"
},
{
"version": "4.3(2.240009)",
"status": "affected"
},
{
"version": "4.3(3.240043)",
"status": "affected"
},
{
"version": "4.3(4.240142)",
"status": "affected"
},
{
"version": "4.3(2.240037)",
"status": "affected"
},
{
"version": "4.3(2.240053)",
"status": "affected"
},
{
"version": "4.3(4.240152)",
"status": "affected"
},
{
"version": "4.2(3l)",
"status": "affected"
},
{
"version": "4.3(2.240077)",
"status": "affected"
},
{
"version": "4.3(4.242028)",
"status": "affected"
},
{
"version": "4.3(4.241063)",
"status": "affected"
},
{
"version": "4.3(4.242038)",
"status": "affected"
},
{
"version": "4.2(3m)",
"status": "affected"
},
{
"version": "4.3(2.240090)",
"status": "affected"
},
{
"version": "4.3(5.240021)",
"status": "affected"
},
{
"version": "4.3(2.240107)",
"status": "affected"
},
{
"version": "4.3(4.242066)",
"status": "affected"
},
{
"version": "4.2(3n)",
"status": "affected"
},
{
"version": "4.3(2.250016)",
"status": "affected"
},
{
"version": "4.3(2.250021)",
"status": "affected"
},
{
"version": "4.3(2.250022)",
"status": "affected"
},
{
"version": "4.3(2.250037)",
"status": "affected"
},
{
"version": "4.3(2.250045)",
"status": "affected"
},
{
"version": "4.3(4.252001)",
"status": "affected"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Cisco",
"product": "Cisco Unified Computing System E-Series Software (UCSE)",
"versions": [
{
"version": "3.2.7",
"status": "affected"
},
{
"version": "3.2.6",
"status": "affected"
},
{
"version": "3.2.4",
"status": "affected"
},
{
"version": "3.2.10",
"status": "affected"
},
{
"version": "3.2.2",
"status": "affected"
},
{
"version": "3.2.3",
"status": "affected"
},
{
"version": "2.4.0",
"status": "affected"
},
{
"version": "3.2.1",
"status": "affected"
},
{
"version": "3.2.11.1",
"status": "affected"
},
{
"version": "3.2.8",
"status": "affected"
},
{
"version": "3.1.1",
"status": "affected"
},
{
"version": "3.0.2",
"status": "affected"
},
{
"version": "2.1.0",
"status": "affected"
},
{
"version": "2.2.2",
"status": "affected"
},
{
"version": "3.1.2",
"status": "affected"
},
{
"version": "3.0.1",
"status": "affected"
},
{
"version": "2.3.2",
"status": "affected"
},
{
"version": "2.3.5",
"status": "affected"
},
{
"version": "2.2.1",
"status": "affected"
},
{
"version": "3.1.4",
"status": "affected"
},
{
"version": "2.4.1",
"status": "affected"
},
{
"version": "2.3.1",
"status": "affected"
},
{
"version": "3.1.3",
"status": "affected"
},
{
"version": "2.3.3",
"status": "affected"
},
{
"version": "2.4.2",
"status": "affected"
},
{
"version": "3.1.5",
"status": "affected"
},
{
"version": "3.1.0",
"status": "affected"
},
{
"version": "2.0.0",
"status": "affected"
},
{
"version": "3.2.11.3",
"status": "affected"
},
{
"version": "3.2.11.5",
"status": "affected"
},
{
"version": "3.2.12.2",
"status": "affected"
},
{
"version": "3.2.13.6",
"status": "affected"
},
{
"version": "3.2.14",
"status": "affected"
},
{
"version": "4.11.1",
"status": "affected"
},
{
"version": "3.2.15",
"status": "affected"
},
{
"version": "4.12.1",
"status": "affected"
},
{
"version": "3.2.15.3",
"status": "affected"
},
{
"version": "4.12.2",
"status": "affected"
},
{
"version": "3.2.16.1",
"status": "affected"
},
{
"version": "2.02",
"status": "affected"
},
{
"version": "4.00",
"status": "affected"
}
],
"defaultStatus": "unknown"
}
],
"providerMetadata": {
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco",
"dateUpdated": "2025-08-27T16:23:18.618Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2025-08-27T17:19:43.762688Z",
"id": "CVE-2025-20342",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2025-08-27T17:38:30.823Z"
}
}
]
}
}