CVE-2020-8723

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
6.3MEDIUM
EPSS
0.3%
top 48.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
18
Intel Compute Module Hns2600bp FirmwareIntel Compute Module Hns2600kp FirmwareIntel Compute Module Hns2600tp Firmware+15 more
Timeline
PublishedAug 13
Latest updateMay 24

Description

Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:LExploitability: 2.1 | Impact: 3.7

Affected Packages18 packages

🔴Vulnerability Details

2
GHSA
GHSA-j47w-xw83-59xw: Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1↗2022-05-24
▶
CVEList
CVE-2020-8723: Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1↗2020-08-13
▶
CVE-2020-8723 (MEDIUM CVSS 6.3) | Cross-site scripting for some Intel | cvebase.io