6.1 Moyenne

CVE-2019-12718 A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an…

Description

A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link and subsequently access a specific web interface page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Small Business 200 Series Smart Switches	Versions non publiées

Références

20191016 Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability tools.cisco.com

Chronologie

Publiée 16 octobre 2019
Dernière modification 21 novembre 2024

Les 9 CVE de Cisco Small Business 200 Series Smart Switches →

CVE-2021-34775 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220… 4.3 Moyenne CVE-2021-34776 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220… 4.3 Moyenne CVE-2021-34777 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220… 4.3 Moyenne CVE-2021-34778 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220… 4.3 Moyenne

Suivre cette CVE