Cisco IMC Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the web-based management interface of Cisco Integrated Management Controller (IMC). This issue allows an authenticated, remote attacker with administrative privileges to execute arbitrary script code in the browser of a user interacting with the interface, or to access sensitive browser-based information. The vulnerability arises from inadequate validation of user input, enabling an attacker to exploit it by convincing a user to click on a crafted link.

Impact

Exploitation of this vulnerability could lead to stored cross-site scripting, allowing injected scripts to be executed in the context of the user's browser session.