Skip to content
fr Sign in
6.1 Medium

CVE-2020-26081 Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated,…

Description

Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against users on an affected system. The vulnerabilities are due to insufficient validation of user-supplied input that is processed by the web UI. An attacker could exploit these vulnerabilities by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information on an affected system.

Affected products and versions

Product Affected versions Fixed in
Cisco IoT Field Network Director (IoT-FND) Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco IoT Field Network Director (IoT-FND)

The 17 CVEs of Cisco IoT Field Network Director (IoT-FND) →
CVE-2026-20167 A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an… 7.7 High CVE-2026-20169 A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an… 6.4 Medium CVE-2026-20168 A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an… 6.5 Medium CVE-2020-3531 A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote… 9.8 Critical
Track this CVE