CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-20296

A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious data into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must be a member of the Administrator or AAA Administrator role.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 13.2%

CVSS Severity

CVSS v3 Score 5.4

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-xss-Ey6XhyPS

Products affected by CVE-2025-20296

Cisco » Ucs Manager » Version: 3.2

cpe:2.3:a:cisco:ucs_manager:3.2
Cisco » Ucs Manager » Version: 3.2(1d)

cpe:2.3:a:cisco:ucs_manager:3.2(1d)
Cisco » Ucs Manager » Version: 3.2(2b)

cpe:2.3:a:cisco:ucs_manager:3.2(2b)
Cisco » Ucs Manager » Version: 3.2(2c)

cpe:2.3:a:cisco:ucs_manager:3.2(2c)
Cisco » Ucs Manager » Version: 3.2(2d)

cpe:2.3:a:cisco:ucs_manager:3.2(2d)
Cisco » Ucs Manager » Version: 3.2(2e)

cpe:2.3:a:cisco:ucs_manager:3.2(2e)
Cisco » Ucs Manager » Version: 3.2(2f)

cpe:2.3:a:cisco:ucs_manager:3.2(2f)
Cisco » Ucs Manager » Version: 3.2(3a)

cpe:2.3:a:cisco:ucs_manager:3.2(3a)
Cisco » Ucs Manager » Version: 3.2(3b)

cpe:2.3:a:cisco:ucs_manager:3.2(3b)
Cisco » Ucs Manager » Version: 3.2(3d)

cpe:2.3:a:cisco:ucs_manager:3.2(3d)
Cisco » Ucs Manager » Version: 3.2(3e)

cpe:2.3:a:cisco:ucs_manager:3.2(3e)
Cisco » Ucs Manager » Version: 3.2(3g)

cpe:2.3:a:cisco:ucs_manager:3.2(3g)
Cisco » Ucs Manager » Version: 3.2(3h)

cpe:2.3:a:cisco:ucs_manager:3.2(3h)
Cisco » Ucs Manager » Version: 3.2(3i)

cpe:2.3:a:cisco:ucs_manager:3.2(3i)
Cisco » Ucs Manager » Version: 3.2(3j)

cpe:2.3:a:cisco:ucs_manager:3.2(3j)
Cisco » Ucs Manager » Version: 3.2(3k)

cpe:2.3:a:cisco:ucs_manager:3.2(3k)
Cisco » Ucs Manager » Version: 3.2(3l)

cpe:2.3:a:cisco:ucs_manager:3.2(3l)
Cisco » Ucs Manager » Version: 3.2(3m)

cpe:2.3:a:cisco:ucs_manager:3.2(3m)
Cisco » Ucs Manager » Version: 3.2(3n)

cpe:2.3:a:cisco:ucs_manager:3.2(3n)
Cisco » Ucs Manager » Version: 3.2(3n)a

cpe:2.3:a:cisco:ucs_manager:3.2(3n)a
Cisco » Ucs Manager » Version: 3.2(3o)

cpe:2.3:a:cisco:ucs_manager:3.2(3o)
Cisco » Ucs Manager » Version: 3.2(3p)

cpe:2.3:a:cisco:ucs_manager:3.2(3p)
Cisco » Ucs Manager » Version: 4.0

cpe:2.3:a:cisco:ucs_manager:4.0
Cisco » Ucs Manager » Version: 4.0(1a)

cpe:2.3:a:cisco:ucs_manager:4.0(1a)
Cisco » Ucs Manager » Version: 4.0(1a)a

cpe:2.3:a:cisco:ucs_manager:4.0(1a)a
Cisco » Ucs Manager » Version: 4.0(1b)

cpe:2.3:a:cisco:ucs_manager:4.0(1b)
Cisco » Ucs Manager » Version: 4.0(1c)

cpe:2.3:a:cisco:ucs_manager:4.0(1c)
Cisco » Ucs Manager » Version: 4.0(1d)

cpe:2.3:a:cisco:ucs_manager:4.0(1d)
Cisco » Ucs Manager » Version: 4.0(2a)

cpe:2.3:a:cisco:ucs_manager:4.0(2a)
Cisco » Ucs Manager » Version: 4.0(2b)

cpe:2.3:a:cisco:ucs_manager:4.0(2b)
Cisco » Ucs Manager » Version: 4.0(2d)

cpe:2.3:a:cisco:ucs_manager:4.0(2d)
Cisco » Ucs Manager » Version: 4.0(2e)

cpe:2.3:a:cisco:ucs_manager:4.0(2e)
Cisco » Ucs Manager » Version: 4.0(4a)

cpe:2.3:a:cisco:ucs_manager:4.0(4a)
Cisco » Ucs Manager » Version: 4.0(4b)

cpe:2.3:a:cisco:ucs_manager:4.0(4b)
Cisco » Ucs Manager » Version: 4.0(4c)

cpe:2.3:a:cisco:ucs_manager:4.0(4c)
Cisco » Ucs Manager » Version: 4.0(4d)

cpe:2.3:a:cisco:ucs_manager:4.0(4d)
Cisco » Ucs Manager » Version: 4.0(4e)

cpe:2.3:a:cisco:ucs_manager:4.0(4e)
Cisco » Ucs Manager » Version: 4.0(4f)

cpe:2.3:a:cisco:ucs_manager:4.0(4f)
Cisco » Ucs Manager » Version: 4.0(4g)

cpe:2.3:a:cisco:ucs_manager:4.0(4g)
Cisco » Ucs Manager » Version: 4.0(4h)

cpe:2.3:a:cisco:ucs_manager:4.0(4h)
Cisco » Ucs Manager » Version: 4.0(4i)

cpe:2.3:a:cisco:ucs_manager:4.0(4i)
Cisco » Ucs Manager » Version: 4.0(4k)

cpe:2.3:a:cisco:ucs_manager:4.0(4k)
Cisco » Ucs Manager » Version: 4.0(4l)

cpe:2.3:a:cisco:ucs_manager:4.0(4l)
Cisco » Ucs Manager » Version: 4.0(4m)

cpe:2.3:a:cisco:ucs_manager:4.0(4m)
Cisco » Ucs Manager » Version: 4.0(4n)

cpe:2.3:a:cisco:ucs_manager:4.0(4n)
Cisco » Ucs Manager » Version: 4.0(4o)

cpe:2.3:a:cisco:ucs_manager:4.0(4o)
Cisco » Ucs Manager » Version: 4.1

cpe:2.3:a:cisco:ucs_manager:4.1
Cisco » Ucs Manager » Version: 4.1(1a)

cpe:2.3:a:cisco:ucs_manager:4.1(1a)
Cisco » Ucs Manager » Version: 4.1(1b)

cpe:2.3:a:cisco:ucs_manager:4.1(1b)
Cisco » Ucs Manager » Version: 4.1(1c)

cpe:2.3:a:cisco:ucs_manager:4.1(1c)
Cisco » Ucs Manager » Version: 4.1(1d)

cpe:2.3:a:cisco:ucs_manager:4.1(1d)
Cisco » Ucs Manager » Version: 4.1(1e)

cpe:2.3:a:cisco:ucs_manager:4.1(1e)
Cisco » Ucs Manager » Version: 4.1(2a)

cpe:2.3:a:cisco:ucs_manager:4.1(2a)
Cisco » Ucs Manager » Version: 4.1(2b)

cpe:2.3:a:cisco:ucs_manager:4.1(2b)
Cisco » Ucs Manager » Version: 4.1(2c)

cpe:2.3:a:cisco:ucs_manager:4.1(2c)
Cisco » Ucs Manager » Version: 4.1(3a)

cpe:2.3:a:cisco:ucs_manager:4.1(3a)
Cisco » Ucs Manager » Version: 4.1(3b)

cpe:2.3:a:cisco:ucs_manager:4.1(3b)
Cisco » Ucs Manager » Version: 4.1(3c)

cpe:2.3:a:cisco:ucs_manager:4.1(3c)
Cisco » Ucs Manager » Version: 4.1(3d)

cpe:2.3:a:cisco:ucs_manager:4.1(3d)
Cisco » Ucs Manager » Version: 4.1(3e)

cpe:2.3:a:cisco:ucs_manager:4.1(3e)
Cisco » Ucs Manager » Version: 4.1(3f)

cpe:2.3:a:cisco:ucs_manager:4.1(3f)
Cisco » Ucs Manager » Version: 4.1(3h)

cpe:2.3:a:cisco:ucs_manager:4.1(3h)
Cisco » Ucs Manager » Version: 4.1(3i)

cpe:2.3:a:cisco:ucs_manager:4.1(3i)
Cisco » Ucs Manager » Version: 4.1(3j)

cpe:2.3:a:cisco:ucs_manager:4.1(3j)
Cisco » Ucs Manager » Version: 4.1(3k)

cpe:2.3:a:cisco:ucs_manager:4.1(3k)
Cisco » Ucs Manager » Version: 4.1(3l)

cpe:2.3:a:cisco:ucs_manager:4.1(3l)
Cisco » Ucs Manager » Version: 4.1(3m)

cpe:2.3:a:cisco:ucs_manager:4.1(3m)
Cisco » Ucs Manager » Version: 4.1(3n)

cpe:2.3:a:cisco:ucs_manager:4.1(3n)
Cisco » Ucs Manager » Version: 4.1(4a)

cpe:2.3:a:cisco:ucs_manager:4.1(4a)
Cisco » Ucs Manager » Version: 4.2(1c)

cpe:2.3:a:cisco:ucs_manager:4.2(1c)
Cisco » Ucs Manager » Version: 4.2(1d)

cpe:2.3:a:cisco:ucs_manager:4.2(1d)
Cisco » Ucs Manager » Version: 4.2(1f)

cpe:2.3:a:cisco:ucs_manager:4.2(1f)
Cisco » Ucs Manager » Version: 4.2(1i)

cpe:2.3:a:cisco:ucs_manager:4.2(1i)
Cisco » Ucs Manager » Version: 4.2(1k)

cpe:2.3:a:cisco:ucs_manager:4.2(1k)
Cisco » Ucs Manager » Version: 4.2(1l)

cpe:2.3:a:cisco:ucs_manager:4.2(1l)
Cisco » Ucs Manager » Version: 4.2(1m)

cpe:2.3:a:cisco:ucs_manager:4.2(1m)
Cisco » Ucs Manager » Version: 4.2(1n)

cpe:2.3:a:cisco:ucs_manager:4.2(1n)
Cisco » Ucs Manager » Version: 4.2(2a)

cpe:2.3:a:cisco:ucs_manager:4.2(2a)
Cisco » Ucs Manager » Version: 4.2(2c)

cpe:2.3:a:cisco:ucs_manager:4.2(2c)
Cisco » Ucs Manager » Version: 4.2(2d)

cpe:2.3:a:cisco:ucs_manager:4.2(2d)
Cisco » Ucs Manager » Version: 4.2(2e)

cpe:2.3:a:cisco:ucs_manager:4.2(2e)
Cisco » Ucs Manager » Version: 4.2(3b)

cpe:2.3:a:cisco:ucs_manager:4.2(3b)
Cisco » Ucs Manager » Version: 4.2(3d)

cpe:2.3:a:cisco:ucs_manager:4.2(3d)
Cisco » Ucs Manager » Version: 4.2(3e)

cpe:2.3:a:cisco:ucs_manager:4.2(3e)
Cisco » Ucs Manager » Version: 4.2(3g)

cpe:2.3:a:cisco:ucs_manager:4.2(3g)
Cisco » Ucs Manager » Version: 4.2(3h)

cpe:2.3:a:cisco:ucs_manager:4.2(3h)
Cisco » Ucs Manager » Version: 4.2(3i)

cpe:2.3:a:cisco:ucs_manager:4.2(3i)
Cisco » Ucs Manager » Version: 4.2(3j)

cpe:2.3:a:cisco:ucs_manager:4.2(3j)
Cisco » Ucs Manager » Version: 4.2(3k)

cpe:2.3:a:cisco:ucs_manager:4.2(3k)
Cisco » Ucs Manager » Version: 4.2(3l)

cpe:2.3:a:cisco:ucs_manager:4.2(3l)
Cisco » Ucs Manager » Version: 4.2(3m)

cpe:2.3:a:cisco:ucs_manager:4.2(3m)
Cisco » Ucs Manager » Version: 4.2(3n)

cpe:2.3:a:cisco:ucs_manager:4.2(3n)
Cisco » Ucs Manager » Version: 4.2(3o)

cpe:2.3:a:cisco:ucs_manager:4.2(3o)
Cisco » Ucs Manager » Version: 4.3(2b)

cpe:2.3:a:cisco:ucs_manager:4.3(2b)
Cisco » Ucs Manager » Version: 4.3(2c)

cpe:2.3:a:cisco:ucs_manager:4.3(2c)
Cisco » Ucs Manager » Version: 4.3(2e)

cpe:2.3:a:cisco:ucs_manager:4.3(2e)
Cisco » Ucs Manager » Version: 4.3(2f)

cpe:2.3:a:cisco:ucs_manager:4.3(2f)
Cisco » Ucs Manager » Version: 4.3(3a)

cpe:2.3:a:cisco:ucs_manager:4.3(3a)
Cisco » Ucs Manager » Version: 4.3(3c)

cpe:2.3:a:cisco:ucs_manager:4.3(3c)
Cisco » Ucs Manager » Version: 4.3(4a)

cpe:2.3:a:cisco:ucs_manager:4.3(4a)
Cisco » Ucs Manager » Version: 4.3(4b)

cpe:2.3:a:cisco:ucs_manager:4.3(4b)
Cisco » Ucs Manager » Version: 4.3(4c)

cpe:2.3:a:cisco:ucs_manager:4.3(4c)
Cisco » Ucs Manager » Version: 4.3(4d)

cpe:2.3:a:cisco:ucs_manager:4.3(4d)
Cisco » Ucs Manager » Version: 4.3(4e)

cpe:2.3:a:cisco:ucs_manager:4.3(4e)
Cisco » Ucs Manager » Version: 4.3(4f)

cpe:2.3:a:cisco:ucs_manager:4.3(4f)
Cisco » Ucs Manager » Version: 4.3(5a)

cpe:2.3:a:cisco:ucs_manager:4.3(5a)
Cisco » Ucs Manager » Version: 4.3(5c)

cpe:2.3:a:cisco:ucs_manager:4.3(5c)
Cisco » Ucs Manager » Version: 4.3(5d)

cpe:2.3:a:cisco:ucs_manager:4.3(5d)
Cisco » Ucs Manager » Version: 4.3(5e)

cpe:2.3:a:cisco:ucs_manager:4.3(5e)
Cisco » Ucs 6324 » Version: N/A

cpe:2.3:h:cisco:ucs_6324:-
Cisco » Ucs 6332-16up » Version: N/A

cpe:2.3:h:cisco:ucs_6332-16up:-
Cisco » Ucs 6332 » Version: N/A

cpe:2.3:h:cisco:ucs_6332:-
Cisco » Ucs 6400 » Version: N/A

cpe:2.3:h:cisco:ucs_6400:-
Cisco » Ucs 64108 » Version: N/A

cpe:2.3:h:cisco:ucs_64108:-
Cisco » Ucs 6454 » Version: N/A

cpe:2.3:h:cisco:ucs_6454:-
Cisco » Ucs 6536 » Version: N/A

cpe:2.3:h:cisco:ucs_6536:-
Cisco » Ucs 9108 » Version: N/A

cpe:2.3:h:cisco:ucs_9108:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-20296

Products

Pricing

Contact Us