Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-40286 Details

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:8.3 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023	CVE	Vendor Advisory
https://www.supermicro.com/en/support/security_center#%21advisories	CVE	Vendor Advisory
https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023	[email protected]	Vendor Advisory
https://www.supermicro.com/en/support/security_center#%21advisories	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CISA-ADP

Product	Versions
supermicro x11ssm-f firmware	1.66
CPE cpe:2.3:o:supermicro:x11ssm-f_firmware:1.66:::::::* Remediation No remediation found in references.
supermicro x11ssm-f	All versions
CPE cpe:2.3:h:supermicro:x11ssm-f:-:::::::* Remediation No remediation found in references.
supermicro x11sae-f firmware	1.66
CPE cpe:2.3:o:supermicro:x11sae-f_firmware:1.66:::::::* Remediation No remediation found in references.
supermicro x11sae-f	All versions
CPE cpe:2.3:h:supermicro:x11sae-f:-:::::::* Remediation No remediation found in references.
supermicro x11sse-f firmware	1.66
CPE cpe:2.3:o:supermicro:x11sse-f_firmware:1.66:::::::* Remediation No remediation found in references.
supermicro x11sse-f	All versions
CPE cpe:2.3:h:supermicro:x11sse-f:-:::::::* Remediation No remediation found in references.

7 change records found show changes

QUICK INFO