5.4 Moyenne

CVE-2021-1127 A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could…

Description

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to improper input validation of log file content stored on the affected device. An attacker could exploit this vulnerability by modifying a log file with malicious code and getting a user to view the modified log file. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or to access sensitive, browser-based information.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Enterprise NFV Infrastructure Software	Versions non publiées

Références

20210113 Cisco Enterprise NFV Infrastructure Software Cross-Site Scripting Vulnerability tools.cisco.com

Chronologie

Publiée 13 janvier 2021
Dernière modification 12 novembre 2024

Les 41 CVE de Cisco Enterprise NFV Infrastructure Software →

CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and… 7.1 Élevée CVE-2026-20288 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker… 6.5 Moyenne CVE-2026-20198 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an… 4.8 Moyenne CVE-2026-20090 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with… 4.8 Moyenne

Suivre cette CVE