Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2019-1975 A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker…

Description

A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to an attacker-controlled web page that contains a malicious HTML iframe. A successful exploit could allow the attacker to conduct clickjacking or other clientside browser attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco HyperFlex HX-Series 3.5 premières → < 3.5.2f 3.5.2f

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco HyperFlex HX-Series

Les 13 CVE de Cisco HyperFlex HX-Series →
CVE-2019-12620 A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated,… 5.3 Moyenne CVE-2019-12621 A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a… 6.8 Moyenne CVE-2019-1958 A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote… 5.4 Moyenne CVE-2019-1857 A vulnerability in the web-based management interface of Cisco HyperFlex HX-Series could allow an unauthenticated,… 6.1 Moyenne
Suivre cette CVE