CVE-2020-8723

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	Intel(R) Server Boards, Server Systems and Compute Modules Advisory	Before version 1.59

References

https://security.netapp.com/advisory/ntap-20200814-0002/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.htmlVendor Advisory
https://security.netapp.com/advisory/ntap-20200814-0002/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.htmlVendor Advisory

Timeline

Published: Aug 13, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-87297.8Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow CVE-2020-87308.8Heap-based overflow for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user CVE-2020-87318.8Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute Modules before versi CVE-2020-87328.8Heap-based buffer overflow in the firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow CVE-2020-87336.7Improper buffer restrictions in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potenti CVE-2020-87346.7Improper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentiall CVE-2020-87367.8Improper access control in subsystem for the Intel(R) Computing Improvement Program before version 2.4.5718 may allow an authenticated user CVE-2020-87376.8Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before ver CVE-2020-87386.7Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially CVE-2020-87397.8Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to pot CVE-2020-87406.7Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escala CVE-2020-87417.8Improper permissions in the installer for the Intel(R) Thunderbolt(TM) non-DCH driver, all versions, for Windows may allow an authenticated