Action not permitted
Modal body text goes here.
ghsa-q9qm-m8mx-29xg
Vulnerability from github
Published
2025-08-27 18:31
Modified
2025-08-27 18:31
Severity ?
Details
A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website.
This vulnerability is due to insufficient verification of vKVM endpoints. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious webpage and potentially capture user credentials. Note: The affected vKVM client is also included in Cisco UCS Manager.
{ "affected": [], "aliases": [ "CVE-2025-20317" ], "database_specific": { "cwe_ids": [ "CWE-601" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-08-27T17:15:36Z", "severity": "HIGH" }, "details": "A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website.\n\nThis vulnerability is due to insufficient verification of vKVM endpoints. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious webpage and potentially capture user credentials.\nNote: The affected vKVM client is also included in Cisco UCS Manager.", "id": "GHSA-q9qm-m8mx-29xg", "modified": "2025-08-27T18:31:54Z", "published": "2025-08-27T18:31:54Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20317" }, { "type": "WEB", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-vkvmorv-CnKrV7HK" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "type": "CVSS_V3" } ] }
cve-2025-20317
Vulnerability from cvelistv5
Published
2025-08-27 16:23
Modified
2025-08-27 18:52
Severity ?
EPSS score ?
Summary
Cisco UCS Virtual Keyboard Video Monitor (vKVM) Open Redirect Vulnerability
References
Impacted products
{ "containers": { "adp": [ { "metrics": [ { "other": { "content": { "id": "CVE-2025-20317", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-08-27T18:51:46.552039Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2025-08-27T18:52:07.395Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "defaultStatus": "unknown", "product": "Cisco Unified Computing System (Managed)", "vendor": "Cisco", "versions": [ { "status": "affected", "version": "4.0(1a)" }, { "status": "affected", "version": "3.2(3n)" }, { "status": "affected", "version": "4.1(1a)" }, { "status": "affected", "version": "4.1(1b)" }, { "status": "affected", "version": "4.0(4h)" }, { "status": "affected", "version": "4.1(1c)" }, { "status": "affected", "version": "3.2(3k)" }, { "status": "affected", "version": "3.2(2c)" }, { "status": "affected", "version": "4.0(4e)" }, { "status": "affected", "version": "4.0(4g)" }, { "status": "affected", "version": "3.2(3i)" }, { "status": "affected", "version": "4.0(2e)" }, { "status": "affected", "version": "3.2(3g)" }, { "status": "affected", "version": "4.0(4a)" }, { "status": "affected", "version": "4.0(2d)" }, { "status": "affected", "version": "3.2(2d)" }, { "status": "affected", "version": "4.0(1b)" }, { "status": "affected", "version": "4.0(4f)" }, { "status": "affected", "version": "3.2(3h)" }, { "status": "affected", "version": "3.2(2f)" }, { "status": "affected", "version": "4.0(4c)" }, { "status": "affected", "version": "3.2(3a)" }, { "status": "affected", "version": "4.0(1c)" }, { "status": "affected", "version": "3.2(3d)" }, { "status": "affected", "version": "3.2(2b)" }, { "status": "affected", "version": "4.0(4b)" }, { "status": "affected", "version": "3.2(2e)" }, { "status": "affected", "version": "4.0(2b)" }, { "status": "affected", "version": "4.0(4d)" }, { "status": "affected", "version": "3.2(1d)" }, { "status": "affected", "version": "3.2(3e)" }, { "status": "affected", "version": "3.2(3l)" }, { "status": "affected", "version": "3.2(3b)" }, { "status": "affected", "version": "4.0(2a)" }, { "status": "affected", "version": "3.2(3j)" }, { "status": "affected", "version": "4.0(1d)" }, { "status": "affected", "version": "3.2(3o)" }, { "status": "affected", "version": "4.0(4i)" }, { "status": "affected", "version": "4.1(1d)" }, { "status": "affected", "version": "4.1(2a)" }, { "status": "affected", "version": "4.1(1e)" }, { "status": "affected", "version": "3.2(3p)" }, { "status": "affected", "version": "4.1(2b)" }, { "status": "affected", "version": "4.0(4k)" }, { "status": "affected", "version": "4.1(3a)" }, { "status": "affected", "version": "4.1(3b)" }, { "status": "affected", "version": "4.1(2c)" }, { "status": "affected", "version": "4.0(4l)" }, { "status": "affected", "version": "4.1(4a)" }, { "status": "affected", "version": "4.1(3c)" }, { "status": "affected", "version": "4.1(3d)" }, { "status": "affected", "version": "4.2(1c)" }, { "status": "affected", "version": "4.2(1d)" }, { "status": "affected", "version": "4.0(4m)" }, { "status": "affected", "version": "4.1(3e)" }, { "status": "affected", "version": "4.2(1f)" }, { "status": "affected", "version": "4.1(3f)" }, { "status": "affected", "version": "4.2(1i)" }, { "status": "affected", "version": "4.1(3h)" }, { "status": "affected", "version": "4.2(1k)" }, { "status": "affected", "version": "4.2(1l)" }, { "status": "affected", "version": "4.0(4n)" }, { "status": "affected", "version": "4.2(1m)" }, { "status": "affected", "version": "4.1(3i)" }, { "status": "affected", "version": "4.2(2a)" }, { "status": "affected", "version": "4.2(1n)" }, { "status": "affected", "version": "4.1(3j)" }, { "status": "affected", "version": "4.2(2c)" }, { "status": "affected", "version": "4.2(2d)" }, { "status": "affected", "version": "4.2(3b)" }, { "status": "affected", "version": "4.1(3k)" }, { "status": "affected", "version": "4.0(4o)" }, { "status": "affected", "version": "4.2(2e)" }, { "status": "affected", "version": "4.2(3d)" }, { "status": "affected", "version": "4.2(3e)" }, { "status": "affected", "version": "4.2(3g)" }, { "status": "affected", "version": "4.1(3l)" }, { "status": "affected", "version": "4.3(2b)" }, { "status": "affected", "version": "4.2(3h)" }, { "status": "affected", "version": "4.2(3i)" }, { "status": "affected", "version": "4.3(2c)" }, { "status": "affected", "version": "4.1(3m)" }, { "status": "affected", "version": "4.3(2e)" }, { "status": "affected", "version": "4.3(3a)" }, { "status": "affected", "version": "4.2(3j)" }, { "status": "affected", "version": "4.3(3c)" }, { "status": "affected", "version": "4.3(4a)" }, { "status": "affected", "version": "4.2(3k)" }, { "status": "affected", "version": "4.3(4b)" }, { "status": "affected", "version": "4.3(4c)" }, { "status": "affected", "version": "4.2(3l)" }, { "status": "affected", "version": "4.3(4d)" }, { "status": "affected", "version": "4.3(2f)" }, { "status": "affected", "version": "4.2(3m)" }, { "status": "affected", "version": "4.3(5a)" }, { "status": "affected", "version": "4.3(4e)" }, { "status": "affected", "version": "4.1(3n)" }, { "status": "affected", "version": "4.3(4f)" }, { "status": "affected", "version": "4.2(3n)" }, { "status": "affected", "version": "4.3(5c)" }, { "status": "affected", "version": "4.2(3o)" }, { "status": "affected", "version": "4.3(5d)" }, { "status": "affected", "version": "4.3(5e)" } ] }, { "defaultStatus": "unknown", "product": "Cisco Unified Computing System (Standalone)", "vendor": "Cisco", "versions": [ { "status": "affected", "version": "2.0(1a)" }, { "status": "affected", "version": "4.0(2g)" }, { "status": "affected", "version": "2.0(13f)" }, { "status": "affected", "version": "3.0(4n)" }, { "status": "affected", "version": "2.0(3e)1" }, { "status": "affected", "version": "3.0(3e)" }, { "status": "affected", "version": "2.0(8h)" }, { "status": "affected", "version": "2.0(10g)" }, { "status": "affected", "version": "3.1(2i)" }, { "status": "affected", "version": "3.0(3c)" }, { "status": "affected", "version": "3.0(4m)" }, { "status": "affected", "version": "3.1(1d)" }, { "status": "affected", "version": "3.0(3a)" }, { "status": "affected", "version": "3.0(1d)" }, { "status": "affected", "version": "2.0(9o)" }, { "status": "affected", "version": "2.0(13n)" }, { "status": "affected", "version": "4.0(4i)" }, { "status": "affected", "version": "4.1(1c)" }, { "status": "affected", "version": "2.0(13q)" }, { "status": "affected", "version": "2.0(3j)1" }, { "status": "affected", "version": "4.0(2c)" }, { "status": "affected", "version": "2.0(9n)" }, { "status": "affected", "version": "4.0(1e)" }, { "status": "affected", "version": "2.0(13o)" }, { "status": "affected", "version": "2.0(6f)" }, { "status": "affected", "version": "2.0(10c)" }, { "status": "affected", "version": "2.0(8d)" }, { "status": "affected", "version": "2.0(9m)" }, { "status": "affected", "version": "4.0(2h)" }, { "status": "affected", "version": "3.0(4j)" }, { "status": "affected", "version": "2.0(10i)" }, { "status": "affected", "version": "3.0(3f)" }, { "status": "affected", "version": "2.0(10l)" }, { "status": "affected", "version": "2.0(12e)" }, { "status": "affected", "version": "2.0(12i)" }, { "status": "affected", "version": "2.0(10h)" }, { "status": "affected", "version": "2.0(13e)" }, { "status": "affected", "version": "3.0(4k)" }, { "status": "affected", "version": "2.0(10b)" }, { "status": "affected", "version": "2.0(6d)" }, { "status": "affected", "version": "2.0(12b)" }, { "status": "affected", "version": "4.0(4h)" }, { "status": "affected", "version": "2.0(12h)" }, { "status": "affected", "version": "2.0(10f)" }, { "status": "affected", "version": "3.0(4l)" }, { "status": "affected", "version": "4.0(1h)" }, { "status": "affected", "version": "4.0(2l)" }, { "status": "affected", "version": "2.0(3i)" }, { "status": "affected", "version": "2.0(3f)3" }, { "status": "affected", "version": "3.0(4a)" }, { "status": "affected", "version": "2.0(13p)" }, { "status": "affected", "version": "2.0(9l)" }, { "status": "affected", "version": "2.0(12g)" }, { "status": "affected", "version": "2.0(12c)" }, { "status": "affected", "version": "2.0(12f)" }, { "status": "affected", "version": "2.0(13k)" }, { "status": "affected", "version": "3.0(3b)" }, { "status": "affected", "version": "2.0(1b)" }, { "status": "affected", "version": "3.1(3g)" }, { "status": "affected", "version": "2.0(4c)" }, { "status": "affected", "version": "4.0(1.240)" }, { "status": "affected", "version": "2.0(12d)" }, { "status": "affected", "version": "4.0(2f)" }, { "status": "affected", "version": "4.0(1g)" }, { "status": "affected", "version": "3.0(4d)" }, { "status": "affected", "version": "3.0(2b)" }, { "status": "affected", "version": "2.0(3d)2" }, { "status": "affected", "version": "2.0(3d)1" }, { "status": "affected", "version": "2.0(9f)" }, { "status": "affected", "version": "2.0(13h)" }, { "status": "affected", "version": "3.0(4e)" }, { "status": "affected", "version": "2.0(8g)" }, { "status": "affected", "version": "4.0(2i)" }, { "status": "affected", "version": "2.0(10e)" }, { "status": "affected", "version": "2.0(13i)" }, { "status": "affected", "version": "2.0(9c)" }, { "status": "affected", "version": "2.0(4c)1" }, { "status": "affected", "version": "3.0(1c)" }, { "status": "affected", "version": "2.0(8e)" }, { "status": "affected", "version": "2.0(9e)" }, { "status": "affected", "version": "2.0(9p)" }, { "status": "affected", "version": "3.1(3i)" }, { "status": "affected", "version": "3.0(4i)" }, { "status": "affected", "version": "2.0(10k)" }, { "status": "affected", "version": "3.0(4o)" }, { "status": "affected", "version": "4.0(4d)" }, { "status": "affected", "version": "4.1(1d)" }, { "status": "affected", "version": "3.1(3c)" }, { "status": "affected", "version": "4.0(4k)" }, { "status": "affected", "version": "3.1(2d)" }, { "status": "affected", "version": "3.1(3a)" }, { "status": "affected", "version": "3.1(3j)" }, { "status": "affected", "version": "4.0(2d)" }, { "status": "affected", "version": "4.1(1f)" }, { "status": "affected", "version": "3.0(4p)" }, { "status": "affected", "version": "4.0(1c)" }, { "status": "affected", "version": "4.0(4f)" }, { "status": "affected", "version": "4.0(4c)" }, { "status": "affected", "version": "3.1(3d)" }, { "status": "affected", "version": "3.1(2g)" }, { "status": "affected", "version": "3.1(2c)" }, { "status": "affected", "version": "4.0(1d)" }, { "status": "affected", "version": "3.1(2e)" }, { "status": "affected", "version": "4.0(1a)" }, { "status": "affected", "version": "4.0(1b)" }, { "status": "affected", "version": "3.1(3b)" }, { "status": "affected", "version": "4.0(4b)" }, { "status": "affected", "version": "3.1(2b)" }, { "status": "affected", "version": "4.0(4e)" }, { "status": "affected", "version": "3.1(3h)" }, { "status": "affected", "version": "3.0(4q)" }, { "status": "affected", "version": "4.0(4l)" }, { "status": "affected", "version": "4.1(1g)" }, { "status": "affected", "version": "4.1(2a)" }, { "status": "affected", "version": "3.0(4r)" }, { "status": "affected", "version": "4.0(2n)" }, { "status": "affected", "version": "4.1(1h)" }, { "status": "affected", "version": "3.1(3k)" }, { "status": "affected", "version": "4.1(2b)" }, { "status": "affected", "version": "4.0(2o)" }, { "status": "affected", "version": "4.0(4m)" }, { "status": "affected", "version": "4.1(2d)" }, { "status": "affected", "version": "4.1(3b)" }, { "status": "affected", "version": "4.0(2p)" }, { "status": "affected", "version": "4.1(2e)" }, { "status": "affected", "version": "4.1(2f)" }, { "status": "affected", "version": "3.0(4s)" }, { "status": "affected", "version": "4.0(4n)" }, { "status": "affected", "version": "4.0(2q)" }, { "status": "affected", "version": "4.1(3c)" }, { "status": "affected", "version": "4.0(2r)" }, { "status": "affected", "version": "4.1(3d)" }, { "status": "affected", "version": "4.1(2g)" }, { "status": "affected", "version": "4.1(2h)" }, { "status": "affected", "version": "4.1(3f)" }, { "status": "affected", "version": "4.1(2j)" }, { "status": "affected", "version": "4.1(2k)" }, { "status": "affected", "version": "4.1(3h)" }, { "status": "affected", "version": "4.2(2a)" }, { "status": "affected", "version": "4.1(3i)" }, { "status": "affected", "version": "4.2(2f)" }, { "status": "affected", "version": "4.2(2g)" }, { "status": "affected", "version": "4.2(3b)" }, { "status": "affected", "version": "4.1(3l)" }, { "status": "affected", "version": "4.2(3d)" }, { "status": "affected", "version": "4.3(1.230097)" }, { "status": "affected", "version": "4.2(1e)" }, { "status": "affected", "version": "4.2(1b)" }, { "status": "affected", "version": "4.2(1j)" }, { "status": "affected", "version": "4.2(1i)" }, { "status": "affected", "version": "4.2(1f)" }, { "status": "affected", "version": "4.2(1a)" }, { "status": "affected", "version": "4.2(1c)" }, { "status": "affected", "version": "4.2(1g)" }, { "status": "affected", "version": "4.3(1.230124)" }, { "status": "affected", "version": "4.1(2l)" }, { "status": "affected", "version": "4.2(3e)" }, { "status": "affected", "version": "4.3(1.230138)" }, { "status": "affected", "version": "4.2(3g)" }, { "status": "affected", "version": "4.3(2.230207)" }, { "status": "affected", "version": "4.2(3h)" }, { "status": "affected", "version": "4.2(3i)" }, { "status": "affected", "version": "4.3(2.230270)" }, { "status": "affected", "version": "4.1(3m)" }, { "status": "affected", "version": "4.1(2m)" }, { "status": "affected", "version": "4.3(2.240002)" }, { "status": "affected", "version": "4.3(3.240022)" }, { "status": "affected", "version": "4.2(3j)" }, { "status": "affected", "version": "4.1(3n)" }, { "status": "affected", "version": "4.3(2.240009)" }, { "status": "affected", "version": "4.3(3.240043)" }, { "status": "affected", "version": "4.3(4.240142)" }, { "status": "affected", "version": "4.3(2.240037)" }, { "status": "affected", "version": "4.3(2.240053)" }, { "status": "affected", "version": "4.3(4.240152)" }, { "status": "affected", "version": "4.2(3l)" }, { "status": "affected", "version": "4.3(2.240077)" }, { "status": "affected", "version": "4.3(4.242028)" }, { "status": "affected", "version": "4.3(4.241063)" }, { "status": "affected", "version": "4.3(4.242038)" }, { "status": "affected", "version": "4.2(3m)" }, { "status": "affected", "version": "4.3(2.240090)" }, { "status": "affected", "version": "4.3(5.240021)" }, { "status": "affected", "version": "4.3(2.240107)" }, { "status": "affected", "version": "4.3(4.242066)" }, { "status": "affected", "version": "4.2(3n)" }, { "status": "affected", "version": "4.3(2.250016)" }, { "status": "affected", "version": "4.3(2.250021)" }, { "status": "affected", "version": "4.3(2.250022)" }, { "status": "affected", "version": "4.3(2.250037)" }, { "status": "affected", "version": "4.3(2.250045)" }, { "status": "affected", "version": "4.3(4.252002)" } ] }, { "defaultStatus": "unknown", "product": "Cisco Unified Computing System E-Series Software (UCSE)", "vendor": "Cisco", "versions": [ { "status": "affected", "version": "3.2.7" }, { "status": "affected", "version": "3.2.6" }, { "status": "affected", "version": "3.2.4" }, { "status": "affected", "version": "3.2.10" }, { "status": "affected", "version": "3.2.2" }, { "status": "affected", "version": "3.2.3" }, { "status": "affected", "version": "2.4.0" }, { "status": "affected", "version": "3.2.1" }, { "status": "affected", "version": "3.2.11.1" }, { "status": "affected", "version": "3.2.8" }, { "status": "affected", "version": "3.1.1" }, { "status": "affected", "version": "3.0.2" }, { "status": "affected", "version": "2.1.0" }, { "status": "affected", "version": "2.2.2" }, { "status": "affected", "version": "3.1.2" }, { "status": "affected", "version": "3.0.1" }, { "status": "affected", "version": "2.3.2" }, { "status": "affected", "version": "2.3.5" }, { "status": "affected", "version": "2.2.1" }, { "status": "affected", "version": "3.1.4" }, { "status": "affected", "version": "2.4.1" }, { "status": "affected", "version": "2.3.1" }, { "status": "affected", "version": "3.1.3" }, { "status": "affected", "version": "2.3.3" }, { "status": "affected", "version": "2.4.2" }, { "status": "affected", "version": "3.1.5" }, { "status": "affected", "version": "3.1.0" }, { "status": "affected", "version": "2.0.0" }, { "status": "affected", "version": "3.2.11.3" }, { "status": "affected", "version": "3.2.11.5" }, { "status": "affected", "version": "3.2.12.2" }, { "status": "affected", "version": "3.2.13.6" }, { "status": "affected", "version": "3.2.14" }, { "status": "affected", "version": "4.11.1" }, { "status": "affected", "version": "3.2.15" }, { "status": "affected", "version": "4.12.1" }, { "status": "affected", "version": "3.2.15.3" }, { "status": "affected", "version": "4.12.2" }, { "status": "affected", "version": "3.2.16.1" }, { "status": "affected", "version": "2.02" }, { "status": "affected", "version": "4.00" } ] } ], "descriptions": [ { "lang": "en", "value": "A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website.\r\n\r\nThis vulnerability is due to insufficient verification of vKVM endpoints. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious webpage and potentially capture user credentials.\r\nNote: The affected vKVM client is also included in Cisco UCS Manager." } ], "exploits": [ { "lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "version": "3.1" }, "format": "cvssV3_1" } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-601", "description": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)", "lang": "en", "type": "cwe" } ] } ], "providerMetadata": { "dateUpdated": "2025-08-27T16:23:18.607Z", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco" }, "references": [ { "name": "cisco-sa-ucs-vkvmorv-CnKrV7HK", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-vkvmorv-CnKrV7HK" } ], "source": { "advisory": "cisco-sa-ucs-vkvmorv-CnKrV7HK", "defects": [ "CSCwm57436" ], "discovery": "INTERNAL" }, "title": "Cisco UCS Virtual Keyboard Video Monitor (vKVM) Open Redirect Vulnerability" } }, "cveMetadata": { "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2025-20317", "datePublished": "2025-08-27T16:23:18.607Z", "dateReserved": "2024-10-10T19:15:13.253Z", "dateUpdated": "2025-08-27T18:52:07.395Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.