CVE-2023-20060: Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Prime Collaboration Deployment could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco plans to release software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-20060?
CVE-2023-20060 is rated as a high severity vulnerability due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2023-20060?
To fix CVE-2023-20060, users should update their Cisco Prime Collaboration Deployment to the latest secure version provided by Cisco.
Who is affected by CVE-2023-20060?
CVE-2023-20060 affects users of the web-based management interface of Cisco Prime Collaboration Deployment.
What type of attack can CVE-2023-20060 facilitate?
CVE-2023-20060 can facilitate cross-site scripting attacks, allowing attackers to potentially execute malicious scripts in users' browsers.
Is authentication required to exploit CVE-2023-20060?
No, CVE-2023-20060 can be exploited by unauthenticated remote attackers, thereby increasing its risk potential.