Skip to content
fr Sign in
6.1 Medium

CVE-2019-12718 A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an…

Description

A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link and subsequently access a specific web interface page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

Affected products and versions

Product Affected versions Fixed in
Cisco Small Business 200 Series Smart Switches Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Small Business 200 Series Smart Switches

The 9 CVEs of Cisco Small Business 200 Series Smart Switches →
CVE-2021-34775 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220… 4.3 Medium CVE-2021-34776 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220… 4.3 Medium CVE-2021-34777 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220… 4.3 Medium CVE-2021-34778 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220… 4.3 Medium
Track this CVE