CVE-2023-40287

CVE-2023-40287 affects Supermicro X11SSM-F, X11SAE-F, and X11SSE-F devices running version 1.66. The issue is a web-interface cross-site scripting (XSS) vulnerability in the X11 series’ BMC web UI, caused by inadequate protection of the web page structure, enabling remote attackers to inject arbi...