5.4
Medium
CVE-2021-1127 A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could…
Description
A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to improper input validation of log file content stored on the affected device. An attacker could exploit this vulnerability by modifying a log file with malicious code and getting a user to view the modified log file. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or to access sensitive, browser-based information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Enterprise NFV Infrastructure Software | Versions not published |
References
Timeline
- Published
- Last modified
Other CVEs of Cisco Enterprise NFV Infrastructure Software
The 41 CVEs of Cisco Enterprise NFV Infrastructure Software →
CVE-2026-20293
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and…
7.1
High
CVE-2026-20288
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker…
6.5
Medium
CVE-2026-20198
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…
4.8
Medium
CVE-2026-20090
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…
4.8
Medium